Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 24.04 LTS Linux Kernel Critical Data Exploit Advisory USN-8031-3
Several security issues were fixed in the Linux kernel.
Ubuntu 24.04: linux-hwe-6.14 Critical Data Leakage Advisory USN-7856-1
Several security issues were fixed in the Linux kernel.
Ubuntu 25.04: Linux Kernel Critical Data Leak Advisory USN-7833-1
Several security issues were fixed in the Linux kernel.
SUSE: MariaDB Moderate Data Access Threats Advisory 2025:03275-1
* bsc#1239150 * bsc#1239151 * bsc#1249212 * bsc#1249213 * bsc#1249219
Mageia 9: QtBase6 & QtBase5 Critical DoS CVE-2025-5455 Advisory 2025-0212
An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If…
Microsoft Warns of Unpatched Office Vulnerability Leading to Data Breaches
Microsoft has disclosed an unpatched zero-day in Office that, if successfully exploited, could result in unauthorized disclosure of sensitive information to ma…
Microsoft Warns of Unpatched Office Vulnerability Leading to Data Exposure
Microsoft has disclosed an unpatched zero-day in Office that, if successfully exploited, could result in unauthorized disclosure of sensitive information to ma…
Nood RAT Malware Attacks Linux Servers, Threatens Sensitive Data
The Nood RAT malware is a new threat to Linux servers worldwide. Security researchers say Nood RAT is designed to steal sensitive information from targeted ser…
Kroll Suffers Data Breach: Employee Falls Victim to SIM Swapping Attack
Risk and financial advisory solutions provider Kroll on Friday disclosed that one of its employees fell victim to a "highly sophisticated" SIM swapping attack.…
IBM == Insecure Business Machines: No-auth remote root exec exploit in Data Risk Manager drops after Big Blue snubs bug repo
IBM has admitted to making 'a process error, improper response' to a bug report that identified four vulnerabilities in its enterprise security software, and t…
Comodo Forums Hack Exposes 245,000 Users' Data ' Recent vBulletin 0-day Used
If you have an account with the Comodo discussion board and support forums, also known as ITarian Forum, you should change your password immediately.Cybersecur…
Debian DSA-6198-1 Valkey Critical Denial of Service Risk Advisory
Two security vulnerabilities were discovered in Valkey, a persistent key-value database with network interface, which could result in denial of service or data…
Debian LTS: DLA-4063-1: gnutls28 Security Advisory Updates
Bing Shi discovered that GnuTLS, a portable library which implements the Transport Layer Security and Datagram Transport Layer Security protocols, had ineffici…
Mageia 2025-0043: libtasn1 Security Advisory Updates
When an input DER data contains a large number of SEQUENCE OF or SET OF elements, decoding the data and searching a specific element in it take quadratic time …
Mageia 2024-0243: libheif Security Advisory Updates
It was discovered that libheif incorrectly handled certain image data. An attacker could possibly use this issue to crash the program, resulting in a denial of…
Mageia 2024-0228: python-scikit-learn Security Advisory Updates
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fi…
Mageia 2024-0121: x11-server, x11-server-xwayland & tigervnc Security Advisory Updates
Heap buffer overread/data leakage in ProcXIGetSelectedEvents. (CVE-2024-31080) Heap buffer overread/data leakage in ProcXIPassiveGrabDevice. (CVE-2024-31081) U…
Hackers Breach ZoneAlarm's Forum Site ' Outdated vBulletin to Blame
ZoneAlarm, an internet security software company owned by Israeli cybersecurity firm Check Point Technologies, has suffered a data breach exposing data of its …
CISA Announces Enhanced Reporting Form for Cyber Incidents
A press release from the Cybersecurity and Infrastructure Security Agency (CISA) today: Today, the Cybersecurity and Infrastructure Security Agency (CISA) unve…
cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes
An attacker broke into the update system of the cPGuard security tool on November 2 and used it to send a malicious script to customers' Linux servers. The scr…
Fedora 45 Aegisub 3.5.0 Blocks Crafted Subtitle Script Execution
Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script refere…
Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach
The state’s Department of Education (FLDOE) said on Thursday it became aware of a data breach involving the Florida Student Financial Aid website on October 19.
Fedora 43 Aegisub CVE-2026-92705 Fixes Arbitrary Code Execution Advisory
Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script refere…
Fedora 44 Aegisub 3.5.0 CVE-2026-92705 Arbitrary Code Exec Fix
Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script refere…