Cybersecurity News

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Articles Vulnerabilities

How Linux Security Teams Spot Vulnerabilities Before CVEs Are Published

Most of us don't hear about a kernel vulnerability until a CVE lands in our inbox or the vulnerability scanner starts complaining. By then, the patch isn't new…

Linux

The Hacker News Breaches & leaks

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that's capable of harvesting sensitive data from compromised systems…

Apple

LinuxSecurity - Security Articles Vulnerabilities

Critical Gitea Docker Authentication Bypass: An Open Door to Your Infrastructure

If you’re running Gitea in a container, stop what you’re doing and check your versioning right now. We’re looking at a critical vulnerability—CVE-2026-20896—sh…

Docker

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 libssh2 Important Remote Code Execution Vuln 2026-eed9e67393

This update addresses a few security issues, one of which could plausibly result in remote code execution.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Debian LTS rlottie Critical C++ Bug Fixes Advisory DLA-4675-1

rLottie is a platform independent C++ library for rendering vector-based animations and art. Its format is used by Telegram Desktop, fast and secure messaging …

Linux

LinuxSecurity - Security Advisories

Fedora 43 PHP Significant Issue Resolution Notification 2026-f4272d87ef

PHP version 8.4.23 (03 Jul 2026) Core: Fixed bug GH-22280 (Incorrect compile error for goto to label preceding try/finally block). (Pratik Bhujel) BCMath:

Linux PHP

The Hacker News

New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware

AI coding assistants have a habit of making things up. Ask one to fetch a popular tool, and it will sometimes hand back a real-sounding name for a project that…

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses Vulnerabilities

Adobe ColdFusion Vulnerabilities Are a Design Failure, Not Bad Luck

Adobe frames the fast exploitation of its ColdFusion vulnerabilities as an attacker speed problem. The real issue is a connector that never should have trusted…

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 python-jupyter-server High Remote Code Exec CVE-2026-44727

Fedora 43 has released an update for python-jupyter-server version 2.20.0, addressing a high-severity CVE related to remote code execution vulnerabilities.

Linux

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

Google and FBI Dismantle NetNut Residential Proxy Botnet

Google, the FBI and the IRS Criminal Investigation division disrupted NetNut, a residential proxy network built on two million hijacked devices and used by 316…

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 8 Autotrace Moderate Heap Overflow Vulnerability RLSA-2023-3067

Moderate: autotrace security update

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux RLSA-2023-2589 autotrace Moderate Buffer Overflow Fix

Moderate: autotrace security update

Linux

LinuxSecurity - Security Articles Breaches & leaks

Linux Kernel Module Rootkits: How Attackers Hide After Compromising Cloud Workloads

If you think you know what’s running on your Linux host, you’re probably wrong. Not because you’re bad at your job—but because the kernel is lying to you.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux Autotrace Moderate Heap-Buffer Overflow Vuln RLSA-2023-3067

Moderate: autotrace security update

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 8 AutoTrace Moderate Heap Buffer Overflow Risk RLSA-2023-3067

Moderate: autotrace security update

Linux

LinuxSecurity - Security Advisories

Rocky Linux Autotrace Moderate Heap Overflow Resolution RLSA-2023-2589

Moderate: autotrace security update

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux identifies moderate autotrace vulnerability - RLSA-2023-3067

Moderate: autotrace security update

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux Autotrace Moderate Heap Buffer Overflow Issue RLSA-2023-2589

Moderate: autotrace security update

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux Autotrace Medium Severity Heap Buffer Overflow RLSA-2023-3067

Moderate: autotrace security update

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux autotrace Moderate Heap Overflow Vulnerability RLSA-2023-2589

Moderate: autotrace security update

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux Autotrace Moderate Heap Buffer Overflow Kleck RLSA-2023-2589

Moderate: autotrace security update

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 8 Autotrace Moderate Buffer Overflow Vuln RLSA-2023-3067

Moderate: autotrace security update

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 9 RLSA-2023-2589 Autotrace Moderate Buffer Overflow

Moderate: autotrace security update

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Debian LTS Nginx Critical Remote Code Exec Denial of Service DLA-4660-1

Multiple vulnerabilities were discoverd in Nginx, a high-performance web and reverse proxy server, which could result in remote code execution, denial of servi…

Linux Nginx

Back to Home

What it means for your servers

OpenSSH: password authentication can be bypassed on Linux systems using musl without PAM, CERT-FR warns

Crédit Mutuel Arkéa confirms an attack that enabled fraudulent transfers, reportedly through a service provider

WordPress: a flaw in the core upgrade process is exploited to run code on servers, CISA warns

cPGuard: a hijacked update channel pushed a root backdoor to about 2,950 Linux servers

Synology: ransomware attacks hit NAS still running DSM versions left unpatched since 2024

Polymarket: a hijacked third-party monitoring script drained traders’ wallets, $3.9 million refunded

Fake IT support on Teams, then domain certificates: Microsoft details two intrusions through AD CS

Binance: $6.3 billion stolen from its hot wallets, a DevOps laptop as the first lead, and the FBI points to North Korea

Chainalysis confirms intrusion into its internal tools: customer user names and e-mail addresses accessed

Northflank security incident: customers told to treat every stored secret as stolen after AI keys are abused

GitLab CVE-2026-97229: now listed as exploited by CISA, and Alpine Linux shows that upgrading is not always enough

Arista VeloCloud Orchestrator: an exploited SQL injection turns a read-only account into an operator

“Vote for my niece”: the WhatsApp scam that steals your account — and your contacts’

PHP2Shell: two critical PHP flaws allow unauthenticated remote code execution on web servers

OVHcloud CLI: official binaries replaced with a secret-stealing malware on GitHub for 1 h 33

ConnectWise Cloud Backup: attackers hijacked the service’s Microsoft 365 identities, MSPs must audit every customer tenant

BeyondTrust Remote Support: a zero-day exploited since August lets attackers take over the appliance without an account

US federal bankruptcy courts stop sending notices after a cyberattack at their contractor

Palo Alto PAN-OS: a management interface flaw gives root on firewalls, already exploited

This week’s barometer: compliance, flaws and speed, sector by sector

Nextcloud: attackers plant web shells through Collabora’s Built-in CODE Server app, update or remove it now

Cisco Secure Email Gateway: a single booby-trapped email gives attackers root, flaw already exploited

Windows Shell: a zero-day that strips the internet warning from files, fixed in October’s Patch Tuesday

Ivanti Connect Secure: zero-day chain exploited for root access, one of three flaws still unpatched

Vacaf, France's family holiday-aid platform, hit by a data breach claimed by a hacker

Hundreds of French supermarkets hit as attackers hijack Danfoss refrigeration controllers

FBI and nine partner agencies expose the toolkit of China-linked Integrity Tech: old flaws, Exchange password spraying and SoftEther VPN backdoors

FortiBleed: the FBI warns attackers are still logging into exposed FortiGate firewalls with stolen passwords

Atlassian Data Center: critical flaw lets anyone read files on Jira, Confluence and Bitbucket servers

FBI breach: attackers got in through a PeopleSoft patch a contractor never installed

France’s cybersecurity agency hit through Metabase: the “harmless” internal tools nobody watches

Denmark: 8.8 million people exposed after attackers used a contractor’s access to the national population register

Microsoft Exchange: one stolen account is enough to read every mailbox — install the out-of-band fix

Apache HTTP Server 2.4.69: 20 security fixes, none critical — how to update calmly

Tax data stolen from France’s DGFiP: what ANSSI’s incident report teaches every company

Citrix NetScaler: two critical zero-days under mass exploitation — patch, then check for compromise

Latest headlines from security outlets

How Linux Security Teams Spot Vulnerabilities Before CVEs Are Published

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

Critical Gitea Docker Authentication Bypass: An Open Door to Your Infrastructure

Fedora 43 libssh2 Important Remote Code Execution Vuln 2026-eed9e67393

Debian LTS rlottie Critical C++ Bug Fixes Advisory DLA-4675-1

Fedora 43 PHP Significant Issue Resolution Notification 2026-f4272d87ef

New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware

Adobe ColdFusion Vulnerabilities Are a Design Failure, Not Bad Luck

Fedora 43 python-jupyter-server High Remote Code Exec CVE-2026-44727

Google and FBI Dismantle NetNut Residential Proxy Botnet

Rocky Linux 8 Autotrace Moderate Heap Overflow Vulnerability RLSA-2023-3067

Rocky Linux RLSA-2023-2589 autotrace Moderate Buffer Overflow Fix

Linux Kernel Module Rootkits: How Attackers Hide After Compromising Cloud Workloads

Rocky Linux Autotrace Moderate Heap-Buffer Overflow Vuln RLSA-2023-3067

Rocky Linux 8 AutoTrace Moderate Heap Buffer Overflow Risk RLSA-2023-3067

Rocky Linux Autotrace Moderate Heap Overflow Resolution RLSA-2023-2589

Rocky Linux identifies moderate autotrace vulnerability - RLSA-2023-3067

Rocky Linux Autotrace Moderate Heap Buffer Overflow Issue RLSA-2023-2589

Rocky Linux Autotrace Medium Severity Heap Buffer Overflow RLSA-2023-3067

Rocky Linux autotrace Moderate Heap Overflow Vulnerability RLSA-2023-2589

Rocky Linux Autotrace Moderate Heap Buffer Overflow Kleck RLSA-2023-2589

Rocky Linux 8 Autotrace Moderate Buffer Overflow Vuln RLSA-2023-3067

Rocky Linux 9 RLSA-2023-2589 Autotrace Moderate Buffer Overflow

Debian LTS Nginx Critical Remote Code Exec Denial of Service DLA-4660-1