Menu

Monthly Archives: June 2025

US shuts down a string of North Korean IT worker scams
British IT worker sentenced to seven months after trashing company network
Scattered Spider crime spree takes flight as focus turns to aviation sector
Sinaloa drug cartel hired a cybersnoop to identify and kill FBI informants

* bsc#1232908 * bsc#1232927 * bsc#1232929 * bsc#1233680 * bsc#1233708

Multiple vulnerabilities have been fixed in catdoc, a text extractor for MS-Office files. CVE-2024-48877

Three steps to boost Amazon S3 data security
Rewriting infrastructure as code for the AI data center
Cloud finally gets some new competition

USN-7582-1 introduced a regression in Samba.

Your browser has ad tech’s fingerprints all over it, but there’s a clean-up squad in town

* bsc#1243711 * bsc#1243712 Cross-References: * CVE-2025-48797

Canada orders Chinese CCTV biz Hikvision to quit the country ASAP
It’s 2025 and almost half of you are still paying ransomware operators

https://security-tracker.debian.org/tracker/DSA-5954-1

This month in security with Tony Anscombe – June 2025 edition

From Australia’s new ransomware payment disclosure rules to another record-breaking DDoS attack, June 2025 saw no shortage of interesting cybersecurity news

Resolves CVE-2024-38824 RHBZ#2372731 Resolves CVE-2024-38824 RHBZ#2372733 Resolves CVE-2025-22239 RHBZ#2372732 Resolves CVE-2025-22239 RHBZ#2372734 Resolves CVE-2025-22236 RHBZ#2372774

4.4.9

Update to release v1.32.6

Update to version 0.16.1 for various bugfixes. This also fixes CVE-2025-22872 in the bundled golang.org/x/net/html.

Resolves CVE-2024-38824 RHBZ#2372731 Resolves CVE-2024-38824 RHBZ#2372733 Resolves CVE-2025-22239 RHBZ#2372732 Resolves CVE-2025-22239 RHBZ#2372734 Resolves CVE-2025-22236 RHBZ#2372774

Update to release v1.32.6

https://security-tracker.debian.org/tracker/DSA-5953-1

ESET Threat Report H1 2025

A view of the H1 2025 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts

Ex-NATO hacker: ‘In the cyber world, there’s no such thing as a ceasefire’
Red Hat Advanced Cluster Security 4.8 simplifies management, enhances workflows and offers deeper external IP visibility
BreachForums broken up? French police arrest five members of notorious cybercrime site

Update to 138.0.7204.49 CVE-2025-6555: Use after free in Animation CVE-2025-6556: Insufficient policy enforcement in Loader CVE-2025-6557: Insufficient data validation in DevTools

Automatic update for podman-5.5.2-1.fc41. security fix for CVE-2025-6032 Changelog for podman * Tue Jun 24 2025 Packit – 5:5.5.2-1 – Update to 5.5.2 upstream release

Update to 3.13.5, this release fixes the following CVEs: CVE 2024-12718, CVE 2025-4138, CVE 2025-4330, CVE-2025-4435, and CVE 2025-4517

Update to 3.13.5, this release fixes the following CVEs: CVE 2024-12718, CVE 2025-4138, CVE 2025-4330, CVE-2025-4435, and CVE 2025-4517

xorg-x11-server CVE fix for CVE-2025-49175, CVE-2025-49176, CVE-2025-49177, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180

Update to 3.13.5, this release fixes the following CVEs: CVE 2024-12718, CVE 2025-4138, CVE 2025-4330, CVE-2025-4435, and CVE 2025-4517

Crims are posing as insurance companies to steal health records and payment info
Google touts Python client library for Data Commons

https://security-tracker.debian.org/tracker/DSA-5951-1

Cisco punts network-security integration as key for agentic AI
Aloha, you’ve been pwned: Hawaiian Airlines discloses ‘cybersecurity event’
So you CAN turn an entire car into a video game controller
Data spill in aisle 5: Grocery giant Ahold Delhaize says 2.2M affected after cyberattack

* bsc#1232908 * bsc#1232929 * bsc#1233680 * bsc#1233708 * bsc#1235062

* bsc#1235231 Cross-References: * CVE-2024-56601

SafePay ransomware: What you need to know
Dumping mainframes for cloud can be a costly mistake
Rust-powered: Two new Python tools to watch

* bsc#1239948 * bsc#1244304 * bsc#1244503 Cross-References:

Rust 1.88 adds support for naked functions

https://security-tracker.debian.org/tracker/DSA-5952-1

https://security-tracker.debian.org/tracker/DSA-5950-1

FBI used bitcoin wallet records to peg notorious IntelBroker as UK national
What if Microsoft just turned you off? Security pro counts the cost of dependency
Cisco fixes two critical make-me-root bugs on Identity Services Engine components
Teradata aims to simplify on-premises AI for data scientists with AI Factory

Several security issues were fixed in libarchive.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

* bsc#1243565 * bsc#1245054 * bsc#1245055 Cross-References:

* bsc#1236217 * bsc#1244156 * bsc#1244157 * bsc#1244158 * jsc#SLE-18320

Glasgow City Council online services crippled following cyberattack
Designing a metadata-driven ETL framework with Azure ADF: An architectural perspective
Qilin ransomware attack on NHS supplier contributed to patient fatality
Eclipse Foundation releases Jakarta EE 11
UK to buy nuclear-capable F-35As that can’t be refueled from RAF tankers
How to use route constraints in ASP.NET Core minimal APIs
Bringing post-quantum cryptography to Windows
Frozen foods supermarket chain deploys facial recognition tech
That WhatsApp from an Israeli infosec expert could be a Iranian phish
Ubuntu Chooses Performance Over Mitigation: Intel GPU Users See 20% Gains
Smashing Security podcast #423: Operation Endgame, deepfakes, and dead slugs
Citrix bleeds again: This time a zero-day exploited – patch now

https://security-tracker.debian.org/tracker/DSA-5949-1

https://security-tracker.debian.org/tracker/DSA-5948-1

Amazon’s Ring can now use AI to ‘learn the routines of your residence’
Computer vision research feeds surveillance tech as patent links spike 5×
Supply chain attacks surge with orgs ‘flying blind’ about dependencies
French cybercrime police arrest five suspected BreachForums admins
Aflac, one of the USA’s largest insurers, is the latest to fall “under siege” to hackers
Google unveils Gemini CLI for developers

* bsc#1244148 Cross-References: * CVE-2011-10007

* bsc#1232929 * bsc#1233680 * bsc#1233708 * bsc#1235062 * bsc#1235231

Nils Emmerich discovered several vulnerabilities in the Xorg X server, which may result in privilege escalation if the X server is running privileged.

UK govt dept website that campaigns against encryption hijacked to advertise … payday loans
Cybercrime is surging across Africa
Pyrefly and Ty: Two new Rust-powered Python type-checking tools compared
Software development meets the McNamara Fallacy

commons-beanutils, utility for manipulating Java beans have an improper Access Control vulnerability. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers

* bsc#1239192 Cross-References: * CVE-2025-22868

New AI benchmarking tools evaluate real world performance
Kotlin 2.2.0 arrives with context parameters, unified management of compiler warnings
Don’t panic, but it’s only a matter of time before critical ‘CitrixBleed 2’ is under attack
Beware of fake SonicWall VPN app that steals users’ credentials
The vulnerability management gap no one talks about
The AI Fix #56: ChatGPT traps man in a cult of one, and AI is actually stupid