Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Interaction
A novel attack technique named EchoLeak has been characterized as a "zero-click" artificial intelligence (AI) vulnerability that allows bad actors to exfiltrat…
Debian: DLA-4208-1 Critical: MariaDB 10.5 DoS and Data Access Issues
Vulnerabilities was discovered in MariaDB, a SQL database server compatible with MySQL. CVE-2025-30693
Data Security Best Practices for Strengthening Linux Networks
When it comes to managing Linux systems, there's one thing every admin knows: security is a constant battle. Sure, you've set up the basics''firewalls, permiss…
Ransomware Gangs Use Skitnet Malware for Stealthy Data Theft and Remote Access
Several ransomware actors are using a malware called Skitnet as part of their post-exploitation efforts to steal sensitive data and establish remote control ov…
Mageia 9: 2025-0147 critical: mod_auth_openidc data leak
mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data. (CVE-2025-31492) References: - https://bugs.mageia.org/show_bug.cgi?id=34216
Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby Servers
Cybersecurity researchers have disclosed three security flaws in the Rack Ruby web server interface that, if successfully exploited, could enable attackers to …
A Tiny Linux Kernel Tweak with Massive Implications for Datacenter Efficiency
In a groundbreaking development, security researchers have introduced a small but mighty tweak to the Linux kernel that promises to cut data center power consu…
Microsoft Copilot Studio Vulnerability Could Expose Sensitive Data
Microsoft’s AI flagship, Copilot Studio, potentially threatened the firm’s internal infrastructure. Specifically, a critical SSRF…Microsoft Copilot Studio Vuln…
Slack AI Vulnerability Exposed Data From Private Channels
Researchers discovered a serious vulnerability in the popular communication tool’s special service, Slack AI. An…Slack AI Vulnerability Exposed Data From Priva…
SAP AI Core Vulnerabilities Expose Customer Data to Cyber Attacks
Cybersecurity researchers have uncovered security shortcomings in SAP AI Core cloud-based platform for creating and deploying predictive artificial intelligenc…
Quit Using EmailGPT as Vulnerability Risks Users Data
Researchers warn users to stop using the EmailGPT service due to an unpatched security vulnerability.…Quit Using EmailGPT as Vulnerability Risks Users Data on …
Replicate AI Vulnerability Could Expose Sensitive Data
Researchers found a serious security vulnerability in the Replicate AI platform that risked AI models.…Replicate AI Vulnerability Could Expose Sensitive Data o…
New Thunderbird, Firefox Vulns Threaten Sensitive Data, System Availability [Updated]
Several significant vulnerabilities have been found in the Thunderbird email client and Firefox web browser. An attacker could exploit these issues to disrupt …
New GhostRace Vulnerability In CPUs May Leak Data
Another security vulnerability has been found in the modern CPUs supporting speculative execution. Identified as…New GhostRace Vulnerability In CPUs May Leak D…
GhostRace – New Data Leak Vulnerability Affects Modern CPUs
A group of researchers has discovered a new data leakage attack impacting modern CPU architectures supporting speculative execution.Dubbed GhostRace (CVE-2024-…
New Thunderbird, Firefox Vulns Threaten Sensitive Data, System Availability
Several significant vulnerabilities have been found in the widely used Thunderbird email client and Firefox web browser. An attacker could exploit these issues…
Say Hello to Downfall, Another Data-Leaking Security Hole in Several Years of Intel Chips
[BLACK HAT] Googlers have lately found not one but two more security vulnerabilities in Intel and AMD processors that can be exploited to steal sensitive data …
Peloton Treadmill Vulnerabilities Risk Users Data
Researchers found numerous vulnerabilities affecting Peloton Treadmill systems that allow malware attacks. An adversary may…Peloton Treadmill Vulnerabilities R…
RedHat: RHSA-2023-4289:01 Important: OpenShift API for Data Protection
OpenShift API for Data Protection (OADP) 1.0.11 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Co…
QuickBlox Framework Vulnerabilities Exposed Data Of Millions Of Users
Researchers found the popular chat service QuickBlox exhibiting numerous security flaws. Exploiting the QuickBlox framework…QuickBlox Framework Vulnerabilities…
RedHat: RHSA-2023-3918:01 Important: OpenShift API for Data Protection
OpenShift API for Data Protection (OADP) 1.1.5 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Com…
Password Reset Hack Exposed in Honda's E-Commerce Platform, Dealers Data at Risk
Security vulnerabilities discovered in Honda's e-commerce platform could have been exploited to gain unrestricted access to sensitive dealer information."Broke…
RedHat: RHSA-2023-2723:01 Moderate: Red Hat Data Grid 8.4.2 security update
An update for Red Hat Data Grid 8 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerabil…
Zaraza Malware Exploits Web Browsers To Steal Stored Passwords And Data
Researchers have found new malware targeting web browsers in active campaigns. Identified as the Zaraza…Zaraza Malware Exploits Web Browsers To Steal Stored Pa…