The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple security vulnerabilities were discovered in libssh2, a client-side C library implementing the SSH2 protocol which could result in memory disclosure, d…
When developer accounts are blocked, the impact is felt far beyond a single login screen. For many projects, these accounts are the access points for the entir…
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that solves one vulnerability can now be installed.
Yuxiao Wu, Yunyi Zhang, Baojun Liu and Haixin Duan discovered that unbound, a validating, recursive, and caching DNS resolver, was vulnerable to cache poisonin…
The threat actor known as Silver Fox has been attributed to abuse of a previously unknown vulnerable driver associated with WatchDog Anti-malware as part of a …
Some of the biggest security problems start quietly. No alerts. No warnings. Just small actions that seem normal but aren't. Attackers now know how to stay hid…
backport fix for CVE-2025-3887 (resolves rhbz#2367919)
fix zlib source path in patch file
Update to version 12.5.2. Fixes CVE-2025-22247
* bsc#1234837 Cross-References: * CVE-2024-56431
Threat hunters have shed light on a new campaign targeting the foreign ministry of an unnamed South American nation with bespoke malware capable of granting re…
Potential disclosure of plaintext in OpenPGP encrypted message. (CVE-2024-11159) References: - https://bugs.mageia.org/show_bug.cgi?id=33763
* bsc#1228123 Cross-References: * CVE-2024-41184
* bsc#1210619 * bsc#1218487 * bsc#1220145 * bsc#1220537 * bsc#1221302
* bsc#1223683 * bsc#1225099 * bsc#1225310 Cross-References:
Czechia and Germany on Friday revealed that they were the target of a long-term cyber espionage campaign conducted by the Russia-linked nation-state actor know…
* bsc#1221793 * bsc#1221797 Cross-References: * CVE-2024-29131
A new phishing campaign is targeting U.S. organizations with the intent to deploy a remote access trojan called NetSupport RAT.Israeli cybersecurity company Pe…
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.
Open VM Tools could allow unintended access to network services.
Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution.