Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2024:4054-1 moderate: javapackages-tools, xmlgraphics-batik, xmlgraphics-commons, xmlgraphics-fop Security Advisory Updates
* bsc#1231347 * bsc#1231428 Cross-References: * CVE-2024-28168
Debian LTS: DLA-2173-1: graphicsmagick security updateDebian LTS: DLA-2173-1: graphicsma
A vulnerability was discovered in graphicsmagick, a collection of image processing tools, that results in a heap overflow in 32-bit applications because of a s…
Kernel Panic in Linux: Causes, Diagnosis & Fixes (2025 Guide)
A kernel panic still means the same thing it always has '' the Linux kernel hit a fault it couldn't handle and shut down to avoid damage. When it happens, the …
Why the Right Metrics Matter When it Comes to Vulnerability Management
How’s your vulnerability management program doing? Is it effective? A success? Let’s be honest, without the right metrics or analytics, how can you tell how we…
Trafficstealer Exploits Container APIs for Malicious Redirections
Researchers caught Trafficstealer actively abusing Docker Container APIs to redirect users to malicious websites. The…Trafficstealer Exploits Container APIs fo…
Mageia 2021-0286: graphicsmagick security upda
Updated graphicsmagick packages fix security vulnerabilities: The graphicsmagick package has been updated to version 1.3.36, fixing several security issues and…
WP Statistics Plugin Flaw Time-Based Blind SQL Injection
Heads up, WordPress admins! The popular plugin WP Statistics had a serious security flaw that…WP Statistics Plugin Flaw Time-Based Blind SQL Injection on Late…
GitLab Fixed Elasticsearch API Flaw That Could Expose Private Groups
GitLab has addressed a security vulnerability that could have exposed private groups. The flaw existed in the Elasticsearch API thatGitLab Fixed Elasticsearch …
Hackers Using Google Analytics to Bypass Web Security and Steal Credit Cards
Researchers reported on Monday that hackers are now exploiting Google's Analytics service to stealthily pilfer credit card information from infected e-commerce…
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised web…
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked …
Debian Bookworm nvidia-graphics-drivers Critical Vulnerabilities DLA-4753-1
Debian has released an update for nvidia-graphics-drivers addressing multiple security vulnerabilities by upgrading to version 535.309.01 for Debian 12, along …
openSUSE GraphicsMagick Essential Command Injection Patch CVE-2026-56379
SUSE released a security update addressing CVE-2026-56379 in GraphicsMagick, which involves arbitrary command injection through the SVG decoder, applicable to …
SUSE GraphicsMagick Important Command Injection Fix 2026-3441-1
SUSE released a security update for GraphicsMagick addressing CVE-2026-56379, which allows arbitrary command injection through crafted SVG files in multiple SU…
openSUSE GraphicsMagick Low Heap Buffer Overwrite Issue 2026-21468-1
openSUSE released a security update for GraphicsMagick fixing CVE-2026-61464, which addresses a heap buffer over-write vulnerability in X11 import, affecting o…
GraphicsMagick patch 2026-3395-1 resolves low heap buffer issue on openSUSE
A security update for GraphicsMagick addresses CVE-2026-61464, a heap buffer overwrite vulnerability affecting various SUSE and openSUSE products. Users can in…
SUSE GraphicsMagick Low Heap Buffer Issue Vuln 2026-3395-1
A security update for GraphicsMagick addresses CVE-2026-61464, which involves a heap buffer overwrite issue when using a crafted window title in X11 imports fo…
openSUSE GraphicsMagick Low Memory Leak Advisory 2026-3201-1
A security update for GraphicsMagick addresses a memory leak vulnerability (CVE-2026-61870) affecting several SUSE products, allowing users to install necessar…
CSRF Attack Explained: Mechanics, Real Exploits, and How to Test for It
A practitioner's breakdown of the CSRF attack: how the forged request works, two documented exploits, a manual test, and the fixes that hold up.CSRF Attack Exp…
Mageia 9 GraphicsMagick Important Heap Overflow Out of Bounds 2026-0117
MGASA-2026-0117 - Updated graphicsmagick packages fix security vulnerabilities
Mageia 9 GraphicsMagick Important Buffer Overflows Fix MGASA-2026-0067
MGASA-2026-0067 - Updated graphicsmagick packages fix security vulnerabilities
Mageia 9 graphicsmagick DoS Division-by-Zero Fix MGASA-2026-0060
MGASA-2026-0060 - Updated graphicsmagick & imagemagick packages fix security vulnerabilities
Zimbra Zero-Day Exploited to Target Brazilian Military via Malicious ICS Files
A now patched security vulnerability in Zimbra Collaboration was exploited as a zero-day earlier this year in cyber attacks targeting the Brazilian military.Tr…
Russian Hackers Exploit Email and VPN Vulnerabilities to Spy on Ukraine Aid Logistics
Russian cyber threat actors have been attributed to a state-sponsored campaign targeting Western logistics entities and technology companies since 2022.The act…