Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser
Microsoft has disclosed details about a now-patched security flaw in Apple's Transparency, Consent, and Control (TCC) framework in macOS that has likely come u…
Understanding the Critical Oath-Toolkit Vulnerability and Its Implications for Admins
As Linux security threats advance and evolve, vulnerabilities often surface unexpectedly, exposing systems to potential exploitation. SUSE researchers recently…
Chrome Update Mitigates Critical Type Confusion Vulnerabilities
Google recently rolled out a critical security update for its widely-used Chrome web browser, addressing several critical vulnerabilities, most notably two hig…
Fedora 39: chromium 2024-7aba3c1531 Security Advisory Updates
update to 129.0.6668.89 High CVE-2024-7025: Integer overflow in Layout High CVE-2024-9369: Insufficient data validation in Mojo High CVE-2024-9370: Inappropria…
Fedora 40: chromium 2024-452b60addf Security Advisory Updates
update to 129.0.6668.89 High CVE-2024-7025: Integer overflow in Layout High CVE-2024-9369: Insufficient data validation in Mojo High CVE-2024-9370: Inappropria…
Debian LTS: DLA-3907-1: sqlite3 Security Advisory Updates
Two vulnerabilities have been fixed in the SQLite database. CVE-2021-36690
EPSS vs. CVSS: What’s the Best Approach to Vulnerability Prioritization?
Many businesses rely on the Common Vulnerability Scoring System (CVSS) to assess the severity of vulnerabilities for prioritization. While these scores provide…
Fedora 41: chromium 2024-b85d941d78 Security Advisory Updates
update to 129.0.6668.58 High CVE-2024-8904: Type Confusion in V8 Medium CVE-2024-8905: Inappropriate implementation in V8 Medium CVE-2024-8906: Incorrect secur…
Fedora 39: chromium 2024-3d29b1647b Security Advisory Updates
update to 129.0.6668.58 * High CVE-2024-8904: Type Confusion in V8 * Medium CVE-2024-8905: Inappropriate implementation in V8 * Medium CVE-2024-8906: Incorrect…
Fedora 40: chromium 2024-d273b23c67 Security Advisory Updates
update to 129.0.6668.58 * High CVE-2024-8904: Type Confusion in V8 * Medium CVE-2024-8905: Inappropriate implementation in V8 * Medium CVE-2024-8906: Incorrect…
Healthcare's Diagnosis is Critical: The Cure is Cybersecurity Hygiene
Cybersecurity in healthcare has never been more urgent. As the most vulnerable industry and largest target for cybercriminals, healthcare is facing an increasi…
Debian LTS: DLA-3891-1: mariadb-10.5 Security Advisory Updates
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. An attacker could generate a malicious dump file which could execute sh…
SolarWinds Issues Patch for Critical ARM Vulnerability Enabling RCE Attacks
SolarWinds has released fixes to address two security flaws in its Access Rights Manager (ARM) software, including a critical vulnerability that could result i…
Debian LTS: DLA-3889-1: pymongo Security Advisory Updates
pymongo a python interface to the MongoDB document-oriented database was vulnerable. An out-of-bounds read in the 'bson' module allowed deserialization of
Apple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers
Details have emerged about a now-patched security flaw impacting Apple's Vision Pro mixed reality headset that, if successfully exploited, could allow maliciou…
Ivanti Releases Urgent Security Updates for Endpoint Manager Vulnerabilities
Ivanti has released software updates to address multiple security flaws impacting Endpoint Manager (EPM), including 10 critical vulnerabilities that could resu…
Mageia 2024-0292: apr Security Advisory Updates
Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially r…
Debian LTS: DLA-3885-1: redis Security Advisory Updates
It was discovered that there were a number of issues in Redis, a popular key-value database: * CVE-2023-45145: On startup, Redis began listening on a Unix
Buffer Overflow Exploits in Linux: Origins, Impact, and Countermeasures
Buffer overflow vulnerabilities have long been one of the biggest headaches in computer security, especially on Linux operating systems that power everything f…
Malicious npm Packages Mimicking 'noblox.js' Compromise Roblox Developers’ Systems
Roblox developers are the target of a persistent campaign that seeks to compromise systems through bogus npm packages, once again underscoring how threat actor…
8 Expert-Recommended Security Practices to Fortify Your Linux Systems
As a Linux admin or an infosec professional, you understand how the security landscape changes due to evolving threats, newly discovered vulnerabilities, and m…
Atlassian Confluence Vulnerability Exploited in Crypto Mining Campaigns
Threat actors are actively exploiting a now-patched, critical security flaw impacting the Atlassian Confluence Data Center and Confluence Server to conduct ill…
Mageia 2024-0282: nodejs & yarnpkg Security Advisory Updates
Nodejs 22 is the new active LTS branch and 5 CVE are fixed. CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High) CVE-2024-22020 - Bypass network imp…
Hardcoded Credential Vulnerability Found in SolarWinds Web Help Desk
SolarWinds has issued patches to address a new security flaw in its Web Help Desk (WHD) software that could allow remote unauthenticated users to gain unauthor…