February 27, 2024
White House urges developers to dump C and C++
Cross-References: * CVE-2023-44487 CVSS scores:
February 27, 2024
* bsc#1185232 * bsc#1185261 * bsc#1185441 * bsc#1185621 * bsc#1187071
February 27, 2024
* bsc#1166486 * bsc#1185861 * bsc#1185863 * bsc#1186449 * bsc#1191256
February 27, 2024
* bsc#1177083 * bsc#1181995 * jsc#ECO-3329 * jsc#PM-2475 * jsc#PM-2730
February 27, 2024
* bsc#1071995 * bsc#1084842 * bsc#1114592 * bsc#1124644 * bsc#1128794
February 27, 2024
* bsc#1214052 Cross-References: * CVE-2023-4039
February 27, 2024
Broadcom builds a better SASE out of VMware VeloCloud and Symantec
February 27, 2024
China warns of fake digital currency wallets fleecing netizens
February 27, 2024
Nevada sues to deny kids access to Meta’s Messenger encryption
February 26, 2024
Welcome to the wild west of the digital world where cyber scammers lurk around every pixelated corner. Cybercrime isn’t just a futuristic Hollywood plotline, it’s a real threat that targets everyone—from wide-eyed kids to seasoned adults and wise grandparents. And guess what? It’s on the rise faster than your Wi-Fi connection during peak hours (okay, […]
February 26, 2024
ALPHV/BlackCat responsible for Change Healthcare cyberattack
February 26, 2024
Back from the dead: LockBit taunts cops, threatens to leak Trump docs
February 26, 2024
Booking.com refund request? It might be an Agent Tesla malware attack
February 26, 2024
Everything you need to know about NIS2
February 26, 2024
A vulnerability has been discovered in btrbk which can lead to remote code execution.
February 26, 2024
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
February 26, 2024
Several security issues were fixed in the Linux kernel.
February 26, 2024
Several security issues were fixed in the Linux kernel.
February 26, 2024
Several security issues were fixed in the Linux kernel.
February 26, 2024
The system could be made to crash under certain conditions.
February 26, 2024
It was discovered that iwd, the iNet Wireless Daemon, does not properly handle messages in the 4-way handshake used when connecting to a protected WiFi network for the first time. An attacker can take advantage of this flaw to gain unauthorized access to a protected WiFi
February 25, 2024
An issue has been found in libjwt, a C library to handle JWT (JSON Web Token). Due to using strcmp(), which does not use constant time during execution, a timing side channel attack might be possible.
February 25, 2024
Update to 122.0.6261.57 High CVE-2024-1669: Out of bounds memory access in Blink High CVE-2024-1670: Use after free in Mojo Medium CVE-2024-1671: Inappropriate implementation in Site Isolation Medium CVE-2024-1672: Inappropriate implementation in Content Security Policy
February 25, 2024
Backport fix for CVE-2023-5841.
February 25, 2024
Update to 2.6.0, fixes CVE-2023-52425, CVE-2023-52426.
February 25, 2024
Update to python3.11.8, backport fix for CVE-2023-27043.
February 25, 2024
https://security-tracker.debian.org/tracker/DSA-5631-1
February 25, 2024
PSYOP campaigns targeting Ukraine – Week in security with Tony Anscombe
Coming in two waves, the campaign sought to demoralize Ukrainians and Ukrainian speakers abroad with disinformation messages about war-related subjects
February 24, 2024
Delivering a better view of system vulnerabilities with Red Hat Insights
February 24, 2024
Rebase to version 2.6.0
February 24, 2024
Update to qt-5.15.12.
February 24, 2024
Update to qt-5.15.12.
February 24, 2024
Update to qt-5.15.12.
February 24, 2024
Update to qt-5.15.12.
February 24, 2024
Update to qt-5.15.12.
February 24, 2024
LockBit extorted billions of dollars from victims, fresh leaks suggest
February 23, 2024
LockBit identity reveal a bigger letdown than Game of Thrones Season 8
February 23, 2024
Tips on meeting complex cloud security challenges
February 23, 2024
* bsc#1210638 Cross-References: * CVE-2023-27043
February 23, 2024
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
February 23, 2024
X protests forced suspension of accounts on orders of India’s government
February 23, 2024
Update to latest upstream. Fixes CVE-2023-50387 and CVE-2023-50868
February 23, 2024
New upstream release (123.0)
February 23, 2024
update to 122.0.6261.57 High CVE-2024-1669: Out of bounds memory access in Blink High CVE-2024-1670: Use after free in Mojo Medium CVE-2024-1671: Inappropriate implementation in Site Isolation Medium CVE-2024-1672: Inappropriate implementation in Content Security Policy
February 23, 2024
Update to latest upstream. Fixes CVE-2023-50387 and CVE-2023-50868
February 23, 2024
https://security-tracker.debian.org/tracker/DSA-5629-1
February 23, 2024
https://security-tracker.debian.org/tracker/DSA-5630-1
February 23, 2024
Cyberattack downs pharmacies across America
February 22, 2024
Authorities dismantled LockBit before it could unleash revamped variant
February 22, 2024
GitHub Copilot makes insecure code even less secure, Snyk says
February 22, 2024
* bsc#1218564 Cross-References: * CVE-2023-52323
February 22, 2024
* bsc#1219267 * bsc#1219268 * bsc#1219438 Cross-References:
February 22, 2024
* bsc#1219267 * bsc#1219268 * bsc#1219438 Cross-References:
February 22, 2024
* bsc#1188609 * bsc#1212850 * bsc#1213210 * bsc#1213925 * bsc#1215311
February 22, 2024
Imagemagick a graphical software suite for displaying, creating and modifying images was vulnerable. CVE-2023-1289
February 22, 2024
Several security issues were fixed in Firefox.
February 22, 2024
https://security-tracker.debian.org/tracker/DSA-5628-1
February 22, 2024
Apple promises to protect iMessage chats from quantum computers
February 21, 2024
Duo face 20 years in prison over counterfeit iPhone scam
February 21, 2024
Harness the power of security automation
February 21, 2024
A common goal for European cyber security
February 21, 2024
Orgs are having a major identity crisis while crims reap the rewards
February 21, 2024
China could be doing better at censorship, think tank finds
February 21, 2024
Update to version 1.27.3. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.27.3 This update also addresses CVE-2023-49295 in quic-go: https://github.com/quic- go/quic-go/security/advisories/GHSA-ppxx-5m9h-6vxf
February 21, 2024
Patch for CVE-2024-24258 and CVE-2024-24259
February 21, 2024
Update to version 1.27.3. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.27.3 This update also addresses CVE-2023-49295 in quic-go: https://github.com/quic- go/quic-go/security/advisories/GHSA-ppxx-5m9h-6vxf
February 21, 2024
https://security-tracker.debian.org/tracker/DSA-5627-1
February 21, 2024
New libuv packages are available for Slackware 15.0 and -current to fix a security issue.
February 20, 2024
* bsc#1011205 * bsc#1093641 * bsc#1125882 * bsc#1167400 * bsc#1207973
February 20, 2024
* bsc#1158095 * bsc#1168699 * bsc#1174713 * bsc#1189608 * bsc#1211188
February 20, 2024
Cops turn LockBit ransomware gang’s countdown timers against them
February 20, 2024
Wyze admits 13,000 users could have viewed strangers’ camera feeds
February 20, 2024
Insider steals 79,000 email addresses at work to promote own business
February 20, 2024
The updated packages fix security vulnerabilities: RTPS dissector memory leak. (CVE-2023-5371) SSH dissector invalid read of memory blocks. (CVE-2023-6174) NetScreen File Parsing Heap-based Buffer Overflow. (CVE-2023-6175) GVCP dissector crash via packet injection or crafted capture file.
February 20, 2024
Vietnam to collect biometrics – even DNA – for new ID cards
February 20, 2024
Stack buffer overflow in virtio_net_flush_tx (CVE-2023-6693) (rhbz#2256436)
February 20, 2024
Update the git2 crate to version 0.18.2. Update the libgit2-sys crate to version 0.16.2. Version 0.16.2 of the libgit2-sys crate includes an update of the bundled copy of libgit2 to version 1.7.2 to address CVE-2024-24575 and CVE-2024-24577. Since the libgit2 bindings cause applications that use them to statically link
February 20, 2024
Update the git2 crate to version 0.18.2. Update the libgit2-sys crate to version 0.16.2. Version 0.16.2 of the libgit2-sys crate includes an update of the bundled copy of libgit2 to version 1.7.2 to address CVE-2024-24575 and CVE-2024-24577. Since the libgit2 bindings cause applications that use them to statically link
February 20, 2024