Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-2153-1: jackson-databind security upda
The following CVE(s) were reported against jackson-databind. CVE-2020-10672
LVI Attacks: New Intel CPU Vulnerability Puts Data Centers At Risk
It appears there is no end in sight to the hardware level security vulnerabilities in Intel processors, as well as to the endless 'performance killing' patches…
RedHat: RHSA-2020-0729:01 Important: Red Hat Data Grid 7.3.5 security upda
An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili…
RedHat: RHSA-2020-0728:01 Moderate: Red Hat Data Grid 7.3.4 security upda
An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerabilit…
RedHat: RHSA-2020-0727:01 Important: Red Hat Data Grid 7.3.3 security upda
An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili…
Walgreens Mobile App Leaked Users' Personal Data Due “Bug”
Walgreens, the popular pharmacy store in the United States, has recently confessed to a security flaw. As revealed, a bugWalgreens Mobile App Leaked Users' Per…
Decathlon Leaked Data Of Spanish Employees Exposing 123 Million Records
The giant sports goods retailer Decathlon now makes it to the news due to a security flaw. Researchers found aDecathlon Leaked Data Of Spanish Employees Exposi…
Slickwraps Website Breached After Disgruntled Researcher Publicly Exposed Findings
A researcher with the alias Lynx0x00 discovered security flaws in Slickwraps systems, after which he/she sent emails to customers usingSlickwraps Website Breac…
Fedora 31: php-horde-Horde-Data FEDORA-2020-1e7cc91d
**Horde_Data 2.1.5** * [jan] Fix Remote Code Execution vulnerability (CVE-2020-8518, Reported by: Andrea Cardaci/SSD).
BRIGHTNESS Attack Can Takeover Air-Gapped Systems To Steal Data
Researchers have devised a new strategy to target air-gapped systems. Dubbed BRIGHTNESS, the attack method exploits the screen brightness settingsBRIGHTNESS At…
Multiple TikTok Vulnerabilities Could Exploit Or Delete Users' Personal Data
Social media craze TikTok has now made it to the news owing to security issues. Researchers have found numerous vulnerabilitiesMultiple TikTok Vulnerabilities …
Debian LTS: DLA-2030-1: jackson-databind security upda
More deserialization flaws were discovered in jackson-databind which could allow an unauthenticated user to perform remote code execution. The issue was resolv…
RedHat: RHSA-2019-4192:01 Important: rh-maven35-jackson-databind securi
An update for rh-maven35-jackson-databind is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a securit…
RedHat: RHSA-2019-4037:01 Important: Red Hat Data Grid 7.3.2 security upda
An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili…
Magento Marketplace Vulnerability Lead To Security Breach
The popular platform Magento Marketplace has now emerged as the latest victim of a cyber attack. As revealed recently, MagentoMagento Marketplace Vulnerability…
Qualcomm TEE Bug In Many Android Phones Can Expose Critical Data
Qualcomm CPUs empower most Android phones today. Recently a Qualcomm TEE bug has made these phones vulnerable to cyber attack.Qualcomm TEE Bug In Many Android …
Qualcomm Chip Flaws Let Hackers Steal Private Data From Android Devices
Hundreds of millions of devices, especially Android smartphones and tablets, using Qualcomm chipsets, are vulnerable to a new set of potentially serious vulner…
RedHat: RHSA-2019-3140:01 Important: Red Hat JBoss Data Virtualization
An update is now available for Red Hat JBoss Data Virtualization. Red Hat Product Security has rated this update as having a security impact of Important. A Co…
Simjacker is Being Actively Exploited in The Wild To Steal Location Data
In the murky realm of hacking and jacking, cybercriminals are now using a primitive method for attacking users. Reportedly, researchersSimjacker is Being Activ…
Instagram Flaw That Could Have Previously Exposed User Data Now Patched
It would seem that Facebooks’ Instagram frequently makes it to the news due to its security glitches. Recently, a researcherInstagram Flaw That Could Have Prev…
SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched. Details of the secur…
Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware
A Russia-aligned threat actor known as Gorbag has been observed using simple information stealer malware in attacks targeting Ukrainian organizations. "Active …
Debian LTS Chromium Update Addresses Code Execution and Data Exposure
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 …
Debian Thunderbird Fixes Code Execution and Data Exposure
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure For the stable distrib…