Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security Patches
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has revealed that an unnamed federal civilian agency's Cisco Firepower device running Adaptive…
Microsoft Warns of WhatsApp-Delivered VBS Malware Hijacking Windows via UAC Bypass
Microsoft is calling attention to a new campaign that has leveraged WhatsApp messages to distribute malicious Visual Basic Script (VBS) files.The activity, beg…
ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ Stories
This week didn’t produce one big headline. It produced many small signals — the kind that quietly shape what attacks will look like next.Researchers tracked in…
Oracle Linux: Advisory CVE-2025-61882 Critical RCE Threat from Cl0p
Oracle has confirmed a critical remote code execution flaw in E-Business Suite, tracked as CVE-2025-61882. The bug resides in the Concurrent Processing and BI …
Gentoo: GLSA-202502-01: OpenSSH: Security Advisory Updates
Multiple vulnerabilities have been found in OpenSSH, the worst of which could allow a remote attacker to gain unauthorized access.
Mageia 2025-0068: microcode Security Advisory Updates
Improper Finite State Machines (FSMs) in Hardware Logic for some Intel® Processors may allow privileged user to potentially enable denial of service via local …
Debian LTS: DLA-4053-1: freerdp2 Security Advisory Updates
Multiple vulnerabilties have been found in freelrdp2, a free implementation of the Remote Desktop Protocol (RDP). The vulnerabilties potentially allows authent…
Mageia 2025-0063: ofono Security Advisory Updates
Sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver() function. (CVE-2023-2794) Sms decoder stack-based buffe…
Debian LTS: DLA-4047-1: sssd Security Advisory Updates
Vulnerabilities were found in sssd, a set of daemons to manage access to remote directories and authentication mechanisms, which could lead to privilege escala…
Act Fast: Chrome 131 Released To Fix Critical Code Execution Bug
India's Computer Emergency Response Team (CERT-In) recently issued a high-risk advisory warning about Google Chrome vulnerabilities in versions prior to 131.0.…
Act Fast: CERT-Ins Chrome Warning & Mitigation Strategies
India's Computer Emergency Response Team (CERT-In) recently issued a high-risk advisory warning about Google Chrome vulnerabilities in versions prior to 131.0.…
Mageia 2024-0346: libarchive Security Advisory Updates
execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can mov…
Mageia 2024-0279: roundcubemail Security Advisory Updates
Fix XSS vulnerability in post-processing of sanitized HTML content [CVE-2024-42009] Fix XSS vulnerability in serving of attachments other than HTML or SVG [CVE…
Ubuntu 6859-1: OpenSSH Security Advisory Updates
OpenSSH could be made to bypass authentication and remotely access systems without proper credentials.
Mageia 2024-0159: guava Security Advisory Updates
A bug that could allow an attacker with access to the machine to potentially access data in a temporary directory created by the Guava. (CVE-2020-8908) Predict…
Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned of active exploitation of a high-severity Adobe ColdFusion vulnerability by unidentifie…
Cisco Warns of Vulnerability in IOS and IOS XE Software After Exploitation Attempts
Cisco is warning of attempted exploitation of a security flaw in its IOS Software and IOS XE Software that could permit an authenticated remote attacker to ach…
VMware Warns of Newly Discovered Vulnerabilities in vSphere Web Client
VMware has shipped updates to address two security vulnerabilities in vCenter Server and Cloud Foundation that could be abused by a remote attacker to gain acc…
New High-Severity Vulnerability Reported in Pulse Connect Secure VPN
Ivanti, the company behind Pulse Secure VPN appliances, has published a security advisory for a high severity vulnerability that may allow an authenticated rem…
US Government Warns of a New Strain of Chinese 'Taidoor' Virus
Intelligence agencies in the US have released information about a new variant of 12-year-old computer virus used by China's state-sponsored hackers targeting g…
Critical RCE Flaw Affects F5 BIG-IP Application Security Servers
Cybersecurity researchers today issued a security advisory warning enterprises and governments across the globe to immediately patch a highly-critical remote c…
Critical RCE Flaw (CVSS 10) Affects F5 BIG-IP Application Security Servers
Cybersecurity researchers today issued a security advisory warning enterprises and governments across the globe to immediately patch a highly-critical remote c…
vBulletin Releases Patch Update for New RCE and SQLi Vulnerabilities
After releasing a patch for a critical zero-day remote code execution vulnerability late last month, vBulletin has recently published a new security patch upda…
[Unpatched] Critical 0-Day RCE Exploit for vBulletin Forum Disclosed Publicly
An anonymous hacker today publicly revealed details and proof-of-concept exploit code for an unpatched, critical zero-day remote code execution vulnerability i…