Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Xenomorph Banking Trojan Garnered 50K Downloads On Play Store
A new banking malware targeted thousands of Android users after appearing on the Google Play…Xenomorph Banking Trojan Garnered 50K Downloads On Play Store on L…
Fedora 34: java-11-openjdk 2022-477401b0
# New in release OpenJDK 11.0.14.1 (2022-02-08): Live versions of these release notes can be found at: * https://bitly.com/openjdk110141 * https://builds.shipi…
VMware Issues Security Patches for High-Severity Flaws Affecting Multiple Products
VMware on Tuesday patched severalhigh-severityvulnerabilitiesimpacting ESXi, Workstation, Fusion, Cloud Foundation, and NSX Data Center for vSphere that could …
New Chrome 0-Day Bug Under Active Attack – Update Your Browser ASAP!
Google on Monday rolled out fixes for eight security issues in the Chrome web browser, including a high-severity vulnerability that's being actively exploited …
Linux Malware on the Ri
Ransomware, cryptojacking, and a cracked version of the penetration-testing tool Cobalt Strike have increasingly targeted Linux in multicloud infrastructure, r…
Alpha-Omega Project takes a human-centered approach to open-source software securi
The Linux Foundation and OpenSSF Alpha-Omega Project, backed by Microsoft and Google, aims to improve the security of 10,000 open-source projects through a hum…
Behind The Buzzword: Four Ways to Assess Your Zero Trust Security Posture
With just about everything delivered from the cloud these days, employees can now collaborate and access what they need from anywhere and on any device. While …
Chrome Limits Websites' Direct Access to Private Networks for Security Reasons
Google Chrome has announced plans to prohibit public websites from directly accessing endpoints located within private networks as part of an upcoming major se…
Serious Security: Linux full-disk encryption bug fixed ' patch no
Lots of people ''run Linux'' without really knowing or caring '' many home routers, navigational aids, webcams and other IoT devices are based on it; the major…
Debian: DSA-5041-1: cfrpki security upda
Multiple vulnerabilities were discovered in Cloudflare's RPKI validator, which could result in denial of service or path traversal. For the stable distribution…
Oracle: ELSA-2022-9011: Oracle Important Security Upda
The following updated rpms for Oracle Linux Cloud Native Environment 1.1 ha= ve been uploaded to the Unbreakable Linux Network:
Hackers Target Real Estate Websites with Skimmer in Latest Supply Chain Attack
Threat actors leveraged a cloud video hosting service to carry out a supply chain attack on more than100 real estate websitesoperated by Sotheby's Realty that …
Are Medical Devices at Risk of Ransomware Attacks?
In May 2017, the first documented ransomware assault on networked medical equipment happened. The worldwide ransomware assault WannaCry compromised radiologica…
New Android Malware Targeting Brazil's ItaúUnibanco Bank Customers
Researchers have discovered a new Android banking malware that targets Brazil’s Itaú Unibanco with the help of lookalike Google Play Store pages to carry out f…
Over 500,000 Android Users Downloaded a New Joker Malware App from Play Store
A malicious Android app with more than 500,000 downloads from the Google Play app store has been found hosting malware that stealthily exfiltrates users' conta…
Hackers Begin Exploiting Second Log4j Vulnerability as a Third Flaw Emerges
Web infrastructure company Cloudflare on Wednesday revealed that threat actors are actively attempting to exploit asecond bugdisclosed in the widely used Log4j…
Debian: DSA-5020-1: apache-log4j2 security upda
Chen Zhaojun of Alibaba Cloud Security Team discovered a critical security vulnerability in Apache Log4j, a popular Logging Framework for Java. JNDI features u…
Top 5 Security Concerns of SaaS Users
SaaS (Software as a Service) is the name of a cloud-based distribution model that enables…Top 5 Security Concerns of SaaS Users on Latest Hacking News
Mozilla Patched 'BigSig' Vulnerability That Affects The NSS Cryptographic Library
A security researcher from Google Project Zero discovered a critical and easily exploitable “BigSig” vulnerability…Mozilla Patched 'BigSig' Vulnerability That …
New Malvertising Campaigns Spreading Backdoors, Malicious Chrome Extensions
A series of malicious campaigns have been leveraging fake installers of popular apps and games such as Viber, WeChat, NoxPlayer, and Battlefield as a lure to t…
Android Banking Trojans Garnered 300K Downloads By Faking Apps
Android banking trojans have once again flooded the Google Play Store to target users by…Android Banking Trojans Garnered 300K Downloads By Faking Apps on Late…
Multiple Vulnerabilities Spotted In Zoom Video Conferencing App
Researchers from Google Project Zero have discovered numerous vulnerabilities in the Zoom app that could…Multiple Vulnerabilities Spotted In Zoom Video Confere…
Imunify360 Bug Leaves Linux Web Servers Open to Code Execution, Takeov
CloudLinux's security platform for Linux-based websites and web servers contains a high-severity PHP deserialization bug, leaving web servers vulnerable to cod…
VMware Warns of Newly Discovered Vulnerabilities in vSphere Web Client
VMware has shipped updates to address two security vulnerabilities in vCenter Server and Cloud Foundation that could be abused by a remote attacker to gain acc…