Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 35: flatpak 2022-7e328bd6
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
Microsoft Warns of Continued Attacks Exploiting Apache Log4j Vulnerabilities
Microsoft is warning of continuing attempts by nation-state adversaries and commodity attackers to take advantage ofsecurity vulnerabilitiesuncovered in the Lo…
CISA, FBI and NSA Publish Joint Advisory and Scanner for Log4j Vulnerabilities
Cybersecurity agencies from Australia, Canada, New Zealand, the U.K., and the U.S. on Wednesday released a joint advisory in response to widespread exploitatio…
Threat Advisory: Linux Ransomware Risks and Prevention Insights
Ransomware has dominated cybersecurity news headlines for the past decade, and for good reason. Through a combination of advanced encryption and effective exto…
VMware Warns of Newly Discovered Vulnerabilities in vSphere Web Client
VMware has shipped updates to address two security vulnerabilities in vCenter Server and Cloud Foundation that could be abused by a remote attacker to gain acc…
Fedora 33: rust 2021-443139f6
Rust 1.56.1 adds a mitigation for CVE-2021-42574, the "trojan source" attack that obfuscates code with BiDi control characters. The compiler will now error on …
Fedora 35: rust 2021-7ad3a01f
Rust 1.56.1 adds a mitigation for CVE-2021-42574, the "trojan source" attack that obfuscates code with BiDi control characters. The compiler will now error on …
Fedora 34: rust 2021-0578e239
Rust 1.56.1 adds a mitigation for CVE-2021-42574, the "trojan source" attack that obfuscates code with BiDi control characters. The compiler will now error on …
Google Warns of New Android 0-Day Vulnerability Under Active Targeted Attacks
Google has rolled out its monthly security patches for Android with fixes for 39 flaws, including a zero-day vulnerability that it said is being actively explo…
U.S. Cyber Command Warns of Ongoing Attacks Exploiting Atlassian Confluence Flaw
The U.S. Cyber Command on Friday warned of ongoing mass exploitation attempts in the wild targeting a now-patched critical security vulnerability affecting Atl…
Microsoft Warns of Another Unpatched Windows Print Spooler RCE Vulnerability
A day after releasingÂPatch Tuesday updates, Microsoft acknowledged yet another remote code execution vulnerability in the Windows Print Spooler component, add…
Fedora 33: prosody 2021-1d574ae4
Prosody 0.11.10 release from their stable branch. This release primarily fixes CVE-2021-37601, a remote information disclosure vulnerability. See the previousl…
Fedora 34: prosody 2021-fe9513e0
Prosody 0.11.10 release from their stable branch. This release primarily fixes CVE-2021-37601, a remote information disclosure vulnerability. See the previousl…
NSA, CISA release Kubernetes hardening guidance following Fancy Bear attac
Hardening guidance from the NSA and CISA seeks to educate IT administrators about cloud security risks and best practices for implementing and maintaining Kube…
New High-Severity Vulnerability Reported in Pulse Connect Secure VPN
Ivanti, the company behind Pulse Secure VPN appliances, has published a security advisory for a high severity vulnerability that may allow an authenticated rem…
Fedora 33: python-eventlet 2021-9fde3d7a
Mitigation for CVE-2021-21419 See: https://github.com/eventlet/eventlet/security/advisories/GHSA-9p9m-jm8w-94p2 for more details.
Fedora 34: python-eventlet 2021-d5915c24
Mitigation for CVE-2021-21419 See: https://github.com/eventlet/eventlet/security/advisories/GHSA-9p9m-jm8w-94p2 for more details.
Fedora 33: firefox 2021-beac175a
- New upstream version (88.0.1) - Fixes CVE-2021-29952 (https://www.mozilla.org/en-US/security/advisories/mfsa2021-20/) ---- - Fixed WebRTC indicator (mozbz#17…
Twitter Warns Developers Of A Potential API Key Leak Due To Glitch
Twitter has recently confessed another security glitch in its systems. Specifically, Twitter now warns of a potential API key leakTwitter Warns Developers Of A…
A New vBulletin 0-Day RCE Vulnerability and Exploit Disclosed Publicly
A security researcher earlier today publicly revealed details and proof-of-concept exploit code for an unpatched, critical zero-day remote code execution vulne…
US CISA Alerts of Active Exploitation of F5 BIG-IP Vulnerability
Earlier this month, a serious security flaw surfaced online targeting F5 Networks. Now, the US CISA has issued an alertUS CISA Alerts of Active Exploitation of…
QSnatch Data-Stealing Malware Infected Over 62,000 QNAP NAS Devices
Cybersecurity agencies in the US and UK yesterday issued a joint advisory about a massive ongoing malware threat infecting Taiwanese company QNAP's network-att…
CISA Urged Users To Patch SigRed Vulnerability Targeting Windows DNS Servers
The US Department of Homeland Security has issued another alert for the users regarding a Windows bug. Given the criticalCISA Urged Users To Patch SigRed Vulne…
IBM == Insecure Business Machines: No-auth remote root exec exploit in Data Risk Manager drops after Big Blue snubs bug repo
IBM has admitted to making 'a process error, improper response' to a bug report that identified four vulnerabilities in its enterprise security software, and t…