Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian: webkit2gtk Important Memory Corruption Issues DSA-6083-1
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-14174 Apple and the Google Threat Analysis Group discovered that proce…
Debian: DSA-6014-1: gimp
Several vulnerabilities were discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of ar…
Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3
Docker has released fixes to address a critical security flaw affecting the Docker Desktop app for Windows and macOS that could potentially allow an attacker t…
Understanding the Linux Filesystem Case Sensitivity Debate
Linux's case-sensitive filesystems have long been seen as essential to the reliability and security of our much-loved OS. Still, recent discussions , led by Li…
Google Releases Chrome Update Mitigating Severe Code Execution Vulns
Google recently issued a crucial Chrome update that those using a version of the browser prior to version 132.0.6834.110 should implement immediately. External…
Don't Delay: Google Releases Chrome Update Addressing Serious Security Vulns
Google recently issued a crucial Chrome update that those using a version of the browser prior to version 132.0.6834.110 should implement immediately. External…
What Are the Best Free VPN Options for Linux Users?
Linux is famous for its strong security. Yet, adding a Virtual Private Network (VPN) boosts privacy even more. A VPN encrypts connections and protects data. Th…
Debian LTS: DLA-3968-1: netatalk Security Advisory Updates
Several issues have been found in netatalk, an Apple Filing Protocol service. Three issues are related to off-by-one errorrs and resultant heap-based buffer ov…
Securing Your Linux Server: Understanding and Mitigating Modern Threats
In this digital age, Linux servers face unprecedented challenges posed by cyber threats. These, in turn, introduce new vulnerabilities that system administrato…
Critical CUPS Vulnerability Exposes Linux Systems to Remote Hijacking
CUPS, or the Common Unix Printing System , is an open-source printing system widely utilized on Unix-like operating systems such as Linux, BSDs, and macOS. CUP…
Latest iOS Update Fixes Another Zero-Day Flaw Under Attack
Apple users need to rush to update their devices once again. A month after patching…Latest iOS Update Fixes Another Zero-Day Flaw Under Attack on Latest Hackin…
Linux Malware! Read This If You Use Free Download Manager
We do not often talk about Linux malware because it is often quickly patched up and not exploited much in the wild compared to Windows/macOS. However, there ha…
Update Adobe Acrobat and Reader to Patch Actively Exploited Vulnerability
Adobe'sPatch Tuesday updatefor September 2023 comes with a patch for a critical actively exploited security flaw in Acrobat and Reader that could permit an att…
Google Rushes to Patch Critical Chrome Vulnerability Exploited in the Wild - Update Now
Google on Monday rolled out out-of-band security patches to address a critical security flaw in its Chrome web browser that it said has been exploited in the w…
Debian LTS: DLA-3426-3: netatalk regression update
Another regression was identified in Netatalk, the Apple Filing Protocol service, introduced with the patch for CVE-2022-23123. It is impacting a subset of use…
U.S. Cybersecurity Agency Adds 6 Flaws to Known Exploited Vulnerabilities Catalog
The U.S. Cybersecurity and Infrastructure Security Agency hasaddeda batch of six flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of…
Researchers Warn of Wi-Fi Security Flaw Affecting iOS, Android, Linux
Apple's decision to support MAC Address Randomization across its platforms may provide some degree of protection against a newly-identified Wi-Fi flaw research…
3CX Supply Chain Attack — Here's What We Know So Far
Enterprise communications software maker 3CX on Thursday confirmed that multiple versions of its desktop app for Windows and macOS are affected by asupply chai…
From Ransomware to Cyber Espionage: 55 Zero-Day Vulnerabilities Weaponized in 2022
As many as 55 zero-day vulnerabilities were exploited in the wild in 2022, with most of the flaws discovered in software from Microsoft, Google, and Apple.Whil…
Mageia 2022-0354: nodejs security update
DNS rebinding in --inspect on macOS (CVE-2022-32212) Bypass via obs-fold mechanic (CVE-2022-32213) HTTP Request Smuggling Due to Incorrect Parsing of Header Fi…
This new Firefox browser feature could stop zero-day bugs in their trac
Mozilla has released Firefox 95 for Linux, Windows and MacOS, which features a new security sandboxing technology called RLBox that uses WebAssembly to isolate…
Linux Porter Discovered M1 Covert Channel Flaw Named ‘M1RACLESâ€
Hector Martin, a hacker who is porting Linux to Apple Silicon Macs through Asahi Linux, has discovered a novel covert channel vulnerability on the M1 chip, cal…
Critical Cisco Jabber Bug Could Let Attackers Hack Remote Systems
Cisco on Wednesday released software updates to address multiple vulnerabilities affecting its Jabber messaging clients across Windows, macOS, Android, and iOS…
Two Critical Flaws in Zoom Could've Let Attackers Hack Systems via Chat
If you're using Zoom'especially during this challenging time to cope with your schooling, business, or social engagement'make sure you are running the latest v…