Update to version 0.24.4. Also contains fixes for RUSTSEC-2025-0006.
May 3, 2025
Update to version 1.5.0 (for now, without PPS feature enabled due to potential correctness issues in the code). Release notes: https://github.com/pendulum-project/ntpd-rs/releases/tag/v1.5.0 Also contains the fix for GHSA-v83q-83hj-rw38.
May 3, 2025
Update pnpm to version 10.9.0 to fix CVE-2024-47829 and nodejs-bash-language- server to version 5.6.0
May 3, 2025
https://security-tracker.debian.org/tracker/DSA-5915-1
May 3, 2025
https://security-tracker.debian.org/tracker/DSA-5914-1
May 2, 2025
https://security-tracker.debian.org/tracker/DSA-5913-1
May 2, 2025
TheWizards APT group uses SLAAC spoofing to perform adversary-in-the-middle attacks
ESET researchers analyzed Spellbinder, a lateral movement tool used to perform adversary-in-the-middle attacks
May 2, 2025
Public cloud providers get into the chip market
May 2, 2025
Update to 1.17.4 Fixes CVE-2025-23359 or GHSA-4hmh-pm5p-9j7j
May 2, 2025
Update to 128.10.0 https://www.thunderbird.net/en-US/thunderbird/128.10.0esr/releasenotes/
May 2, 2025
Update to latest upstream (138.0)
May 2, 2025
Update to 1.17.4 Fixes CVE-2025-23359 or GHSA-4hmh-pm5p-9j7j
May 2, 2025
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
May 2, 2025
Update to 1.17.4 Fixes CVE-2025-23359 or GHSA-4hmh-pm5p-9j7j
May 2, 2025
https://security-tracker.debian.org/tracker/DSA-5911-1
May 1, 2025
https://security-tracker.debian.org/tracker/DSA-5910-1
May 1, 2025
https://security-tracker.debian.org/tracker/DSA-5909-1
May 1, 2025
Redis bets big on an open source return
May 1, 2025
Several security issues were fixed in micropython.
May 1, 2025
The following vulnerability has been discovered in the gorilla/csrf package for Go: Prior to 1.7.3, gorilla/csrf did not validate the Origin header against an allowlist. It executed its validation of the Referer header for
May 1, 2025
In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used. (CVE-2025-43965) In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packet_size is mishandled (related to the rendering of all channels in an arbitrary order). (CVE-2025-46393)
May 1, 2025
Multiple vulnerabilties were discovered in u-boot, a boot loader for embedded systems.
May 1, 2025
Multiple vulnerabilities were discovered in nagvis, a visualization addon for Nagios or Icinga. CVE-2021-33178
May 1, 2025
Backport proposed fix for CVE-2025-31344 from OpenMandriva.
May 1, 2025
https://security-tracker.debian.org/tracker/DSA-5912-1
May 1, 2025
Ex-NSA cyber-boss: AI will soon be a great exploit coder
April 30, 2025
In today’s digital world, passwords have become a necessary part of life. But even though you use them for almost everything you do online, you probably don’t give them the thought they truly deserve. May 1, 2025, is World Password Day, a reminder that passwords are the unsung heroes of cybersecurity, the first line of […]
April 30, 2025
Zoho adds AI capabilities to its low code dev platform
April 30, 2025
This month in security with Tony Anscombe – April 2025 edition
From the near-demise of MITRE’s CVE program to a report showing that AI outperforms elite red teamers in spearphishing, April 2025 was another whirlwind month in cybersecurity
April 30, 2025
Meta will offer its Llama AI model as an API too
April 30, 2025
FBI steps in amid rash of politically charged swattings
April 30, 2025
H2O could be made to crash if it received specially crafted network traffic.
April 30, 2025
PostgreSQL could be made to execute arbitrary code if it received specially crafted input.
April 30, 2025
April 30, 2025
* bsc#1233294 * bsc#1235431 Cross-References: * CVE-2024-50205
April 30, 2025
Catching up with Angular 19
April 30, 2025
Four essential ingredients of software development
April 30, 2025
April 30, 2025
* bsc#1239909 Cross-References: * CVE-2025-2588
April 30, 2025
Apiiro launches AI-powered risk analysis map for software
April 30, 2025
https://security-tracker.debian.org/tracker/DSA-5908-1
April 29, 2025
Several security issues were fixed in Mistral.
April 29, 2025
Several security issues were fixed in Mistral.
April 29, 2025
Apache Tomcat could be made to crash if it received specially crafted network traffic.
April 29, 2025
Apache Tomcat could be made to crash if it received specially crafted network traffic.
April 29, 2025
How safe and secure is your iPhone really?
Your iPhone isn’t necessarily as invulnerable to security threats as you may think. Here are the key dangers to watch out for and how to harden your device against bad actors.
April 29, 2025
Why hasn’t cheaper hardware lowered cloud prices?
April 29, 2025
5 ways generative AI boosts cloud and IT operations
April 29, 2025
Several security issues were fixed in the Linux kernel.
April 29, 2025
Several security issues were fixed in the Linux kernel.
April 29, 2025
Update to version 2.10.0. Aside from the new upstream features, this update also refreshes many bundled dependencies, fixing a few CVEs. https://github.com/caddyserver/caddy/releases/tag/v2.10.0
April 29, 2025
Update to version 2.10.0. Aside from the new upstream features, this update also refreshes many bundled dependencies, fixing a few CVEs. https://github.com/caddyserver/caddy/releases/tag/v2.10.0
April 29, 2025
How to survive as a CISO aka ‘chief scapegoat officer’
April 28, 2025
Admission impossible: NSA, CISA brass absent from RSA Conf
April 28, 2025
Microsoft previews SignalR client for iOS
April 28, 2025
Heap buffer overflow in Codecs. (CVE-2025-3619) Use after free in USB. (CVE-2025-3620) References: – https://bugs.mageia.org/show_bug.cgi?id=34208
April 28, 2025
Heap buffer overflow in Codecs. (CVE-2025-3619) Use after free in USB. (CVE-2025-3620) References: – https://bugs.mageia.org/show_bug.cgi?id=34208
April 28, 2025
Juray Sarinay discovered that PDF documents signed with the adbe.pkcs7.sha1 standard were incompletely validated by LibreOffice, which could cause invalid signatures to be accepted as legitimate.
April 28, 2025
Juray Sarinay discovered that PDF documents signed with the adbe.pkcs7.sha1 standard were incompletely validated by LibreOffice, which could cause invalid signatures to be accepted as legitimate.
April 28, 2025
The future of AI in cybersecurity in a word: Optimistic
April 28, 2025
Several security vulnerabilities have been discovered in libsoup2.4, a http client/server library popularly used in GNOME, et.al. CVE-2025-2784
April 28, 2025
Understanding the Linux Filesystem Case Sensitivity Debate
April 28, 2025
Multiple vulnerabilities have been fixed in the PDF rendering library poppler. CVE-2020-36023
April 28, 2025
AWS updates Amazon Bedrock’s Data Automation capability
April 28, 2025
OpenSearch in 2025: Much more than an Elasticsearch fork
April 28, 2025