Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-2905-1: apache-log4j1.2 security upda
Multiple security vulnerabilities have been discovered in Apache Log4j 1.2, a Java logging framework, when it is configured to use JMSSink, JDBCAppender, JMSAp…
Apple Pays $100,500 Bounty to Hacker Who Found Way to Hack MacBook Webcam
Apple last year fixed a new set of macOS vulnerabilities that exposed Safari browser to attack, potentially allowing malicious actors to access users' online a…
Critical Bugs in Control Web Panel Expose Linux Servers to RCE Attac
Researchers have disclosed details of two critical security vulnerabilities (CVE-2021-45467) in Control Web Panel, an open-source Linux control panel software …
New Zloader Banking Malware Campaign Exploiting Microsoft Signature Verification
An ongoingZLoadermalware campaign has been uncovered exploiting remote monitoring tools and a nine-year-old flaw concerning Microsoft's digital signature verif…
Mageia 2021-0499: squid security upda
Updated squid packages fix security vulnerability: Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of a…
Fedora 33: dovecot 2021-891c1ab1
* CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled keys to validate tokens, i…
Fedora 34: dovecot 2021-208340a2
* CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled keys to validate tokens, i…
Mageia 2021-0284: tunnel security upda
Updated stunnel package fixes security vulnerability: Client certificate not correctly verified when redirect and verifyChain options are used (CVE-2021-20230).
21Nails: Multiple Critical Vulnerabilities Discovered in Exim Mail Server - Patch No
The Qualys Research Team has discovered multiple critical vulnerabilities in the popular Exim mail server , which they have named 21Nails . Some of these flaws…
Fedora 31: libvirt FEDORA-2020-5cd83efd
* Fix iptables No chain/target/match by that name (bz #1813830) * systemd: start libvirtd after firewalld/iptables services (bz #1697636) * CVE-2020-12430: mem…
Fedora 31: gnutls FEDORA-2020-76b705bb
Update to upstream 3.6.14 release, and security fix for CVE-2020-13777. ---- - Fix certificate chain validation involving the expired "AddTrust External Root".…
Chinese Hackers Using New iPhone Hack to Spy On Uyghur Muslims
A Chinese hacking group has been found leveraging a new exploit chain in iOS devices to install a spyware implant targeting the Uyghur Muslim minority in China…
Chinese Hackers Using New iPhone Hack to Spy On Uyghurs Muslims
A Chinese hacking group has been found leveraging a new exploit chain in iOS devices to install a spyware implant targeting the Uyghur Muslim minority in China…
Mageia 2020-0173: golang security updateMageia 2020-0173: golang security upda
Updated golang packages fix security vulnerability: An integer overflow vulnerability was found in the Go crypto/x509 and golang.org/x/crypto/cryptobyte librar…
Hackers Used Local News Sites to Install Spyware On iPhones
A newly discovered watering-hole campaign is targeting Apple iPhone users in Hong Kong by using malicious website links as a lure to install spyware on the dev…
Debian LTS: DLA-2120-1: rake security upda
There is an OS command injection vulnerability in Rake (a ruby make-like utility) < 12.3.3 in Rake::FileList when supplying a filename that begins with the pip…
Google offers up to $1.5 million bounty for remotely hacking Titan M chip
With its latest announcement to increase bug bounty rewards for finding and reporting critical vulnerabilities in the Android operating system, Google yesterda…
SciLinux: SLSA-2019-3067-1 Important: jss on SL7.x x86_64
JSS: OCSP policy "Leaf and Chain" implicitly trusts the root certificate (CVE-2019-14823) For more details about the security issue(s), including the impact, a…