Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
CISA Adds New Chromium Zero-Day Bug to its Known Exploited Vulnerability Catalog
Google has released fixes for a high-severity Chromium security flaw ( CVE-2024-5274 ) impacting its widely used Chrome browser and other Chromium-based browse…
French Diplomatic Entities Targeted in Russian-Linked Cyber Attacks
State-sponsored actors with ties to Russia have been linked to targeted cyber attacks aimed at French diplomatic entities, the country's information security a…
JetBrains GitHub Plugin Vulnerability Affects IntelliJ IDEs
JetBrains has alerted users to a critical vulnerability in its GitHub plugin for IntelliJ platforms,…JetBrains GitHub Plugin Vulnerability Affects IntelliJ IDE…
Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers
Arm is warning of a security vulnerability impacting Mali GPU Kernel Driver that it said has been actively exploited in the wild.Tracked as CVE-2024-4610, the …
AlmaLinux 9 c-ares Low Out of Bounds Read Warning Advisory ALSA-2024-3842
c-ares security update
Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by Hackers
Microsoft is warning about the potential abuse of Azure Service Tags by malicious actors to forge requests from a trusted service and get around firewall rules…
CISA Adds A Linux Vulnerability To Its Known Exploits Catalog
CISA warned users of a severe vulnerability in Linux under active attack. While the vulnerability…CISA Adds A Linux Vulnerability To Its Known Exploits Catalog…
Microsoft Warns of Surge in Cyber Attacks Targeting Internet-Exposed OT Devices
Microsoft has emphasized the need for securing internet-exposed operational technology (OT) devices following a spate of cyber attacks targeting such environme…
Kremlin-Backed APT28 Targets Polish Institutions in Large-Scale Malware Campaign
Polish government institutions have been targeted as part of a large-scale malware campaign orchestrated by a Russia-linked nation-state actor called APT28."Th…
Fedora 38: thunderbird 2024-5d080305ab
Update to 115.9.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-14/ https://www.thunderbird.net/en-US/thunderbird/115.9.0/releasenotes/
Fedora 40: thunderbird 2024-fc2ae12c31
Update to 115.9.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-14/ https://www.thunderbird.net/en-US/thunderbird/115.9.0/releasenotes/
Fedora 39: thunderbird 2024-9f8235fb21
Update to 115.9.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-14/ https://www.thunderbird.net/en-US/thunderbird/115.9.0/releasenotes/
Fortinet Warns of Severe SQLi Vulnerability in FortiClientEMS Software
Fortinet has warned of a critical security flaw impacting its FortiClientEMS software that could allow attackers to achieve code execution on affected systems.…
Fedora 40 maven-shared-io High Type Confusion Advisory CVE-2024-1938
The Fedora 40 update for maven-shared-io (version 3.0.0-25) includes a change to system JDK from 17 to 21 and addresses high-severity security issues in Chromi…
Nood RAT Malware Attacks Linux Servers, Threatens Sensitive Data
The Nood RAT malware is a new threat to Linux servers worldwide. Security researchers say Nood RAT is designed to steal sensitive information from targeted ser…
Fedora 38: thunderbird 2024-5361211b10
Update to 115.8.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-07/ https://www.thunderbird.net/en-US/thunderbird/115.8.0/releasenotes/
Five Eyes Agencies Expose APT29's Evolving Cloud Attack Tactics
Cybersecurity and intelligence agencies from the Five Eyes nations have released a joint advisory detailing the evolving tactics of the Russian state-sponsored…
Fedora 39: thunderbird 2024-81863a1613
Update to 115.8.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-07/ https://www.thunderbird.net/en-US/thunderbird/115.8.0/releasenotes/
Fedora 38: syncthing 2024-b93312a597
Update to version 1.27.3. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.27.3 This update also addresses CVE-2023-49295 in quic-go: http…
Fedora 39: syncthing 2024-c46536abe6
Update to version 1.27.3. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.27.3 This update also addresses CVE-2023-49295 in quic-go: http…
Mastodon Vulnerability Allows Hackers to Hijack Any Decentralized Account
The decentralized social network Mastodon has disclosed a critical security flaw that enables malicious actors to impersonate and take over any account."Due to…
Fedora 39: thunderbird 2024-c8c2a52fb8
Update to 115.7.0 * https://www.mozilla.org/en- US/security/advisories/mfsa2024-04/ * https://www.thunderbird.net/en- US/thunderbird/115.7.0/releasenotes/
Fedora 38: thunderbird 2024-278a776610
Update to 115.7.0 * https://www.mozilla.org/en- US/security/advisories/mfsa2024-04/ * https://www.thunderbird.net/en- US/thunderbird/115.7.0/releasenotes/
Double-Extortion Play Ransomware Strikes 300 Organizations Worldwide
The threat actors behind the Play ransomware are estimated to have impacted approximately 300 entities as of October 2023, according to a new joint cybersecuri…