Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
ThreatsDay Bulletin: DNS Poisoning Flaw, Supply-Chain Heist, Rust Malware Trick and New RATs Rising
The comfort zone in cybersecurity is gone. Attackers are scaling down, focusing tighter, and squeezing more value from fewer, high-impact targets. At the same …
LiteLLM Vulnerability Chain: What Security Teams Running AI Gateways Need to Do Now
A three-CVE chain lets any default LiteLLM user escalate to admin and get a shell on the gateway server. A separate RCE is already in CISA's KEV. Here's what t…
Fedora 44 kind Go Toolchain Update Advisory 2026-b902c91814
Rebuild with newer golang toolchain
NSAs and CISAs Recent Security Guidance: The Good and the Bad
The NSA and CISA released the guide '' Securing the Software Supply Chain: Recommended Practices Guide for Developers '' last month and while David Wheeler, th…
Fedora 43: proxychains-ng Denial of Service CVE-2025-34451 Advisory
Update to master to fix CVE-2025-34451
REvil Used 0-Day in Kaseya Ransomware Attack, Demands $70 Million Ransom
Amidst the massiveÂsupply-chain ransomware attackÂthat triggered an infection chain compromising thousands of businesses on Friday, new details have emerged ab…
LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
Three vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interact…
ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories
You scroll past one incident and see another that feels familiar, like it should have been fixed years ago, but it still works with small changes. Same bugs. S…
Fedora 43 python-scitokens Advisory 2026-727b73bfa0 Path Traversal Fix
Remove legacy parent SciToken chaining behavior from token initialization and claim handling Harden Enforcer scope path traversal validation (including encoded…
Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI Credentials
The maintainers of the nx build system have alerted users to a supply chain attack that allowed attackers to publish malicious versions of the popular npm pack…
Malware Injected into 6 npm Packages After Maintainer Tokens Stolen in Phishing Attack
Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a phishing campaign designed to steal the project ma…
Malware Injected into 5 npm Packages After Maintainer Tokens Stolen in Phishing Attack
Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a phishing campaign designed to steal the project ma…
Malware Injected into 7 npm Packages After Maintainer Tokens Stolen in Phishing Attack
Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a phishing campaign designed to steal the project ma…
Microsoft Warns of FoggyWeb Malware Targeting Active Directory FS Servers
Microsoft on Monday revealed new malware deployed by the hacking group behind the SolarWinds supply chain attack last December to deliver additional payloads a…
Microsoft Warns of WhatsApp-Delivered VBS Malware Hijacking Windows via UAC Bypass
Microsoft is calling attention to a new campaign that has leveraged WhatsApp messages to distribute malicious Visual Basic Script (VBS) files.The activity, beg…
Debian LTS: DLA-3917-1: python-reportlab Security Advisory Updates
Reportlab allowed attackers to execute arbitrary code (RCE) via supplying a crafted PDF file. For Debian 11 bullseye, this problem has been fixed in version
Fedora 39: rust-varlink_generator 2024-40ee18b2e7 Security Advisory Updates
This update contains builds from a mini-mass-rebuild for Rust applications (and some C-style libraries). Rebuilding with the Rust 1.78 toolchain should fix inc…
Fedora 39: sudo-rs 2024-40ee18b2e7 Security Advisory Updates
This update contains builds from a mini-mass-rebuild for Rust applications (and some C-style libraries). Rebuilding with the Rust 1.78 toolchain should fix inc…
Fedora 39: snapshot 2024-40ee18b2e7 Security Advisory Updates
This update contains builds from a mini-mass-rebuild for Rust applications (and some C-style libraries). Rebuilding with the Rust 1.78 toolchain should fix inc…
Fedora 40: rust-zram-generator 2024-ce2936b568 Security Advisory Updates
This update contains builds from a mini-mass-rebuild for Rust applications (and some C-style libraries). Rebuilding with the Rust 1.78 toolchain should fix inc…
Fedora 40: wildcard 2024-ce2936b568 Security Advisory Updates
This update contains builds from a mini-mass-rebuild for Rust applications (and some C-style libraries). Rebuilding with the Rust 1.78 toolchain should fix inc…
Fedora 40: snapshot 2024-ce2936b568 Security Advisory Updates
This update contains builds from a mini-mass-rebuild for Rust applications (and some C-style libraries). Rebuilding with the Rust 1.78 toolchain should fix inc…
Fedora 40: system76-keyboard-configurator 2024-ce2936b568 Security Advisory Updates
This update contains builds from a mini-mass-rebuild for Rust applications (and some C-style libraries). Rebuilding with the Rust 1.78 toolchain should fix inc…
Fedora 40: sudo-rs 2024-ce2936b568 Security Advisory Updates
This update contains builds from a mini-mass-rebuild for Rust applications (and some C-style libraries). Rebuilding with the Rust 1.78 toolchain should fix inc…