Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Microsoft Patched Copilot Vulnerabilities That Could Expose Data
A security researcher discovered numerous vulnerabilities in Microsoft Copilot that could expose users’ personal information,…Microsoft Patched Copilot Vulnera…
New Malware PG_MEM Targets PostgreSQL Databases for Crypto Mining
Cybersecurity researchers have unpacked a new malware strain dubbed PG_MEM that's designed to mine cryptocurrency after brute-forcing their way into PostgreSQL…
Critical Security Update for Google Chrome Mitigates Data Loss, Full System Compromise
The release of Google Chrome 124 addresses four vulnerabilities, including a critical security flaw enabling remote attackers to execute arbitrary code, potent…
Mageia 2024-0069: jackson-databind security update
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects. (CVE-2020-36518) In FasterXML j…
Researchers Uncover New GPU Side-Channel Vulnerability Leaking Sensitive Data
A novel side-channel attack calledGPU.ziprenders virtually all modern graphics processing units (GPU) vulnerable to information leakage."This channel exploits …
Cybersecurity Agencies Warn Against IDOR Bugs Exploited for Data Breaches
Cybersecurity agencies in Australia and the U.S. havepublisheda joint cybersecurity advisory warning against security flaws in web applications that could be e…
Severe Flaw in Google Cloud's Cloud SQL Service Exposed Confidential Data
A new security flaw has been disclosed in the Google Cloud Platform's (GCP) Cloud SQL service that could be potentially exploited to obtain access to confident…
Two Critical Flaws Found in Alibaba Cloud's PostgreSQL Databases
A chain of two critical flaws has been disclosed in Alibaba Cloud's ApsaraDB RDS for PostgreSQL and AnalyticDB for PostgreSQL that could be exploited to breach…
Researchers Discover SATA Cables Could Leak Data From Air-Gapped Systems
Security researchers have found another strategy to steal data from air-gapped systems, this time exploiting…Researchers Discover SATA Cables Could Leak Data F…
Vulnerabilities In ENC DataVault Software Impact Multiple Storage Devices
Numerous vulnerabilities in the encryption software ‘ENC DataVault’ indirectly impacted the security of storage devices.…Vulnerabilities In ENC DataVault Softw…
Serious Data Exposure Vulnerabilities Spotted In OnionShare Platform
Two serious security vulnerabilities in OnionShare could expose users' data. OnionShare is a secure communication…Serious Data Exposure Vulnerabilities Spotted…
Morgan Stanley Disclosed Data Breach Following The Accellion FTA Exploit
The financial services and investment bank Morgan Stanley has recently disclosed a data breach in…Morgan Stanley Disclosed Data Breach Following The Accellion …
A Now-Patched Linux Kernel Vulnerability Could Lead To Data Leaks
A serious vulnerability in Linux Kernel could leak data as it exposed stack memory. The…A Now-Patched Linux Kernel Vulnerability Could Lead To Data Leaks on La…
Two WhatsApp Vulnerabilities Could Allow Stealing Sensitive Data, Hacking Phones
Heads up, WhatsApp users! Two separate vulnerabilities in WhatsApp could potentially expose sensitive user data…Two WhatsApp Vulnerabilities Could Allow Steali…
Mageia 2020-0351: evolution-data-server security upda
evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads add…
Experts Reported Security Bug in IBM's Db2 Data Management Software
Cybersecurity researchers today disclosed details of a memory vulnerability in IBM's Db2 family of data management products that could potentially allow a loca…
Cisco Addressed Multiple Bugs In Data Center Network Manager
Cisco recently issued patches for numerous security bugs in the Data Center Network Manager. These include multiple medium and high-severityCisco Addressed Mul…
StrandHogg 2.0 Vulnerability Targets Android Devices To Steal Data
Last year, Android devices suffered cyber attacks after attackers exploited the StrandHogg vulnerability to steal banking data. Now, after aStrandHogg 2.0 Vuln…
New 'CacheOut' Attack Leaks Data from Intel CPUs, VMs and SGX Enclave
Another month, another speculative execution vulnerability found in Intel processors.If your computer is running any modern Intel CPU built before October 2018…
WP Database Reset Plugin Had Some 'Easily Exploitable' Vulnerabilities
Another threat to WordPress sites has surfaced online. Researchers have discovered some serious security vulnerabilities in theÂWP Database Reset plugin.WP Dat…
OnePlus Suffers New Data Breach Impacting Its Online Store Customers
Chinese smartphone maker OnePlus has suffered a new data breach exposing personal and order information of an undisclosed number of its customers, likely, as a…
Debian: DSA-4542-1: jackson-databind security update
It was discovered that jackson-databind, a Java library used to parse JSON and other data formats, did not properly validate user input before attempting deser…
Hackers steal customer data from major Russian hosting provider FirstVDS
Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulne…
Sandbox vulnerability gives rogue AI agents a path to escape and leak data, research says
The new research, published by AI security startup AIR, found that a network filtering flaw in Vercel Sandbox — a tool used to run code in isolated environment…