Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
IcePeony and Transparent Tribe Target Indian Entities with Cloud-Based Tools
High-profile entities in India have become the target of malicious campaigns orchestrated by the Pakistan-based Transparent Tribe threat actor and a previously…
Google Boosts Linux Security with Array Checks
As the cybersecurity landscape continues to evolve, developers and system administrators have faced several challenges in ensuring the safety of systems writte…
The Future of Container Security: Trends and Open Source Tools to Watch
Containers are among the many recent inventions of modern computing. They have emerged as the cornerstone of software development and deployment. They isolate …
FlyingYeti Exploits WinRAR Vulnerability to Deliver COOKBOX Malware in Ukraine
Cloudflare on Thursday said it took steps to disrupt a month-long phishing campaign orchestrated by a Russia-aligned threat actor called FlyingYeti targeting U…
The Fundamentals of Cloud Security Stress Testing
״Defenders think in lists, attackers think in graphs,” said John Lambert from Microsoft, distilling the fundamental difference in mindset between those who def…
New Cuttlefish Malware Hijacks Router Connections, Sniffs for Cloud Credentials
A new malware called Cuttlefish is targeting small office and home office (SOHO) routers with the goal of stealthily monitoring all traffic through the devices…
AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials
Cybersecurity researchers have shed light on a tool referred to as AndroxGh0st that's used to target Laravel applications and steal sensitive data."It works by…
SUSE: 2024:0806-1 important: google-oauth-java-client
* bsc#1199188 Cross-References: * CVE-2021-22573
Five Eyes Agencies Expose APT29's Evolving Cloud Attack Tactics
Cybersecurity and intelligence agencies from the Five Eyes nations have released a joint advisory detailing the evolving tactics of the Russian state-sponsored…
Gentoo: GLSA-202402-23: Chromium, Google Chrome, Microsoft Edge: Multi
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.
Gentoo: GLSA-202401-34: Chromium, Google Chrome, Microsoft Edge: Multi
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.
SUSE: 2024:0128-1 moderate: cloud-init
* bsc#1198269 * bsc#1201010 * bsc#1214169 * bsc#1215740 * bsc#1215794
LUCR-3: Scattered Spider Getting SaaS-y in the Cloud
LUCR-3 overlaps with groups such as Scattered Spider, Oktapus, UNC3944, and STORM-0875 and is a financially motivated attacker that leverages the Identity Prov…
Agile Approach to Mass Cloud Credential Harvesting and Crypto Mining Sprints Ahead
Developers are not the only people who have adopted the agile methodology for their development processes. From 2023-06-15 to 2023-07-11, Permiso Security’s p0…
Sophisticated BundleBot Malware Disguised as Google AI Chatbot and Utilities
A new malware strain known as BundleBot has been stealthily operating under the radar by taking advantage of.NET single-file deployment techniques, enabling th…
openSUSE: 2023:0171-1 important: nextcloud-desktop
An update that fixes 5 vulnerabilities is now available.
Gentoo: GLSA-202305-10: Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities
Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution.
Oracle8: ELSA-2023-12298: cloud-init Important Security Update
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Oracle9: ELSA-2023-12299: cloud-init Important Security Update
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Linux Kernel Logic Allowed Spectre Attack on 'Major Cloud Provider'
The Spectre vulnerability that has haunted hardware and software makers since 2018 continues to defy efforts to bury it.
openSUSE: 2023:0083-1 important: nextcloud
An update that fixes three vulnerabilities is now available.
New MacStealer macOS Malware Steals iCloud Keychain Data and Passwords
A new information-stealing malware has set its sights on Apple's macOS operating system to siphon sensitive information from compromised devices.DubbedMacSteal…
Amazon Linux 2023, a Cloud-Optimized Linux Distro, Is Now Available
Earlier this week, Amazon announced the availability of Amazon Linux 2023, its third-generation Linux distribution. With this distribution, Amazon is promising…
Consider Open Source Software While Evaluating The Security Of Cloud Applications
The pace of software development is accelerating. Devops teams are under more pressure to launch products rapidly, and they are able to do so in part because o…