Stay Informed

Cybersecurity News

Home / News

Clear

Quick searches: Linux Windows Microsoft 365 AWS OVH VMware WordPress Fortinet Citrix VPN

5263 result(s) for "OT" — best match first.

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

The Hacker News
The Hacker News Vulnerabilities

Webinar: How to Build AI Threat Readiness Into Your Security Operations

Security teams have spent years trying to detect threats faster. AI is changing the harder part: how much time defenders have left to act. Advanced AI models c…

BleepingComputer
BleepingComputer Vulnerabilities

New Cisco firewall zero-day exploited to crash SSL VPN devices

Cisco released security updates to patch a denial-of-service zero-day in Adaptive Security Appliance (ASA) and Threat Defense (FTD) software that attackers are…

Cisco VPN

The Hacker News
The Hacker News Vulnerabilities

Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls

Cisco has released patches to address a high-severity security flaw in Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat De…

Cisco VPN

LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Firefox ESR Fixes Code Execution and Sandbox Escape in Debian LTS

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape,…

Linux

The Hacker News
The Hacker News Vulnerabilities

Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys

Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization's SD-WAN ne…

Cisco

BleepingComputer
BleepingComputer Breaches & leaks

Volt Typhoon hides zero-day attacks using 'Silent Train' framework

Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, includ…

BleepingComputer
BleepingComputer Vulnerabilities

InfraTrust report warns of exploited flaws in critical network infrastructure

Attackers are actively exploiting vulnerabilities across critical network infrastructure, and PHP flaws known as "PHP2Shell" put the web management interfaces …

VPN PHP

BleepingComputer
BleepingComputer Vulnerabilities

CISA warns of hackers now exploiting critical Node2Shell flaw

On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known a…

The Hacker News
The Hacker News Vulnerabilities

Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits

An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, t…

Linux Windows Android

LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Debian Valkey Update Blocks Denial of Service and Code Execution

Several vulnerabilities were discovered in Valkey, an in-memory key-value database. These issues could cause denial of service and, in some cases, potentially …

Linux

The Hacker News
The Hacker News Vulnerabilities

Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes

Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox i…

LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Debian LTS OpenSSL Update Fixes DTLS and Signature Timing Issues

Several vulnerabilities have been discovered in OpenSSL, a Secure Socket Layer toolkit providing the SSL and TLS cryptographic protocols for secure communicati…

Linux OpenSSL

LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 Nix 2.31.6 Fixes High- and Moderate-Severity Issues

Update to 2.31.6 which addresses: CVE-2026-110450 (High, https://github.com/NixOS/nix/security/advisories/GHSA- jwvx-xq5j-gc56) and other Moderate issues: see …

Linux GitHub

BleepingComputer
BleepingComputer Vulnerabilities

Abandoned Popcorn Time app exposed millions of devices to RCE attacks

Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw tha…

The Hacker News
The Hacker News Vulnerabilities

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind fo…

GitLab

BleepingComputer
BleepingComputer Vulnerabilities

PHP shares mitigation for new RCE vulnerability with no patch

The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has…

PHP

LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Debian LTS ClamAV Update Addresses Malicious File Risks

Several vulnerabilities have been found in the ClamAV antivirus toolkit, which could result in denial of service or possibly other unspecified impact when proc…

Linux

LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Debian Erlang Fixes Authentication Bypass and TLS Impersonation

Several vulnerabilities were discovered in Erlang/OTP, a programming language and runtime environment. These issues could result in denial of service, HTTP req…

Linux

LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 VLC Update Addresses RTSP Disclosure and Code Execution

VLC 3.0.24: https://code.videolan.org/videolan/vlc/-/tags/3.0.24 Switch GUI to Qt6 (not for EPEL9) Re-enable AS-DCP plugin Disable RDP plugin Disable Real RTSP…

Linux

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles Vulnerabilities

New DNS Security Flaws Can Disrupt Website and Email Access

An online shop can be running normally while customers cannot reach it.

The Hacker News
The Hacker News Breaches & leaks

ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More

This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js…

Linux PHP GitLab

BleepingComputer
BleepingComputer Vulnerabilities

GitLab warns of new max severity code execution vulnerability

GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable ser…

GitLab

The Hacker News
The Hacker News Vulnerabilities

OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL

A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL machine when the developer signed…

Windows

LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Debian LTS expat Update Fixes Heap Errors and Integer Overflow

Multiple vulnerabilities have been found in expat. CVE-2025-59375 The patchset previously uploaded in DLA-4807-1 did not fully address the issue since a major …

Linux