Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Newly Patched SAP ASE Flaws Could Let Attackers Hack Database Servers
A new set of critical vulnerabilities uncovered in SAP's Sybase database software can grant unprivileged attackers complete control over a targeted database an…
Debian LTS: DLA-1943-1: jackson-databind security update
More deserialization flaws were discovered in jackson-databind relating to the classes in com.zaxxer.hikari.HikariConfig, com.zaxxer.hikari.HikariDataSource, c…
Debian git-annex Fixes Cross-Repository Data Exfiltration
A vulnerabilitiy was discovered in git-annex, a tool to manage large files with git, without storing the file contents in git, which could result in data exfil…
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Th…
FBI Blames Contractor’s Missed Patch for ShinyHunters Breach
Eduard Kovacs reports: The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau employees, Reute…
New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips
New academic research has identified multiple RowHammer attacks against high-performance graphics processing units (GPUs) that could be exploited to escalate p…
Warlock Ransomware Breaches SmarterTools Through Unpatched SmarterMail Server
SmarterTools confirmed last week that the Warlock (aka Storm-2603) ransomware gang breached its network by exploiting an unpatched SmarterMail instance.The inc…
Debian 11: DLA-4261-1 node-form-data Important HPP Issue CVE-2025-7783
It was discovered that there was a potential HTTP Parameter Pollution (HPP) issue in node-form-data, a tool to create multipart/form-data streams module in Nod…
CVE Database Funding Crisis: Urgent Need for Better Support
This past weekend, the globally recognized Common Vulnerabilities and Exposures (CVE) database, essential for tracking security flaws in software and systems, …
Warning: DEEPDATA Malware Exploiting Unpatched Fortinet Flaw to Steal VPN Credentials
A threat actor known as BrazenBamboo has exploited an unresolved security flaw in Fortinet's FortiClient for Windows to extract VPN credentials as part of a mo…
New Malware PG_MEM Targets PostgreSQL Databases for Crypto Mining
Cybersecurity researchers have unpacked a new malware strain dubbed PG_MEM that's designed to mine cryptocurrency after brute-forcing their way into PostgreSQL…
Critical Security Update for Google Chrome Mitigates Data Loss, Full System Compromise
The release of Google Chrome 124 addresses four vulnerabilities, including a critical security flaw enabling remote attackers to execute arbitrary code, potent…
Mageia 2024-0069: jackson-databind security update
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects. (CVE-2020-36518) In FasterXML j…
Google Workspace Vulnerabilities Risk Security Breaches – Warn Researchers
Researchers have found numerous security vulnerabilities in Google Workspace that risk breaches. While the vulnerabilities…Google Workspace Vulnerabilities Ris…
Researchers Uncover New GPU Side-Channel Vulnerability Leaking Sensitive Data
A novel side-channel attack calledGPU.ziprenders virtually all modern graphics processing units (GPU) vulnerable to information leakage."This channel exploits …
Mallox Ransomware Exploits Weak MS-SQL Servers to Breach Networks
Mallox ransomware activities in 2023 have witnessed a 174% increase when compared to the previous year, new findings from Palo Alto Networks Unit 42 reveal."Ma…
Severe Flaw in Google Cloud's Cloud SQL Service Exposed Confidential Data
A new security flaw has been disclosed in the Google Cloud Platform's (GCP) Cloud SQL service that could be potentially exploited to obtain access to confident…
Researchers Discover SATA Cables Could Leak Data From Air-Gapped Systems
Security researchers have found another strategy to steal data from air-gapped systems, this time exploiting…Researchers Discover SATA Cables Could Leak Data F…
Vulnerabilities In ENC DataVault Software Impact Multiple Storage Devices
Numerous vulnerabilities in the encryption software ‘ENC DataVault’ indirectly impacted the security of storage devices.…Vulnerabilities In ENC DataVault Softw…
Serious Data Exposure Vulnerabilities Spotted In OnionShare Platform
Two serious security vulnerabilities in OnionShare could expose users' data. OnionShare is a secure communication…Serious Data Exposure Vulnerabilities Spotted…
A Now-Patched Linux Kernel Vulnerability Could Lead To Data Leaks
A serious vulnerability in Linux Kernel could leak data as it exposed stack memory. The…A Now-Patched Linux Kernel Vulnerability Could Lead To Data Leaks on La…
Two WhatsApp Vulnerabilities Could Allow Stealing Sensitive Data, Hacking Phones
Heads up, WhatsApp users! Two separate vulnerabilities in WhatsApp could potentially expose sensitive user data…Two WhatsApp Vulnerabilities Could Allow Steali…
Mageia 2020-0351: evolution-data-server security upda
evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads add…
Experts Reported Security Bug in IBM's Db2 Data Management Software
Cybersecurity researchers today disclosed details of a memory vulnerability in IBM's Db2 family of data management products that could potentially allow a loca…