Several security issues were fixed in OpenJDK 11.
May 6, 2025
Several security issues were fixed in OpenJDK 8.
May 6, 2025
JetBrains open-sources Mellum LLM
May 5, 2025
Phishing attacks are a significant threat to consumers, with cybercriminals constantly evolving their tactics to deceive unsuspecting individuals. The integration of artificial intelligence (AI) into phishing schemes has made these attacks even more sophisticated and challenging to detect. AI-enabled phishing attacks seriously threaten consumers and their data. The volume of these attacks is staggering with […]
May 5, 2025
How MCP could add value to MongoDB databases
May 5, 2025
Knowing when to use AI coding assistants
May 5, 2025
Bringing DevOps, DevSecOps, and MLOps together
May 5, 2025
May 5, 2025
* bsc#1223272 * bsc#1234028 * bsc#1235091 * bsc#1235092 * bsc#1236007
May 5, 2025
May 5, 2025
* bsc#1202828 * bsc#1217770 * bsc#1224413 * jsc#PED-11066 * jsc#PED-1174
May 5, 2025
May 5, 2025
* bsc#1202828 * bsc#1217770 * bsc#1224413 * jsc#PED-11066 * jsc#PED-1174
May 5, 2025
May 4, 2025
RSAC 2025 wrap-up – Week in security with Tony Anscombe
From the power of collaborative defense to identity security and AI, catch up on the event’s key themes and discussions
May 4, 2025
ansible 2.10.7+merged+base+2.10.17+dfsg-0+deb11u1 introduced a regression in the win_template module. This caused win_template tasks to fail with an error. For Debian 11 bullseye, this problem has been fixed in version
May 4, 2025
Update to 136.0.7103.59 CVE-2025-4096: Heap buffer overflow in HTML CVE-2025-4050: Out of bounds memory access in DevTools CVE-2025-4051: Insufficient data validation in DevTools CVE-2025-4052: Inappropriate implementation in DevTools
May 4, 2025
April 2025 CPU
May 4, 2025
A heap-based buffer overflow vulnerability was discovered in vips, an fast image processing library designed with efficiency in mind, which may result in denial of service (application crash) if a specially crafted TIFF image file is processed.
May 3, 2025
Update to 136.0.7103.59 * CVE-2025-4096: Heap buffer overflow in HTML * CVE-2025-4050: Out of bounds memory access in DevTools * CVE-2025-4051: Insufficient data validation in DevTools * CVE-2025-4052: Inappropriate implementation in DevTools
May 3, 2025
Update to 128.10.0 https://www.thunderbird.net/en-US/thunderbird/128.10.0esr/releasenotes/
May 3, 2025
Update to version 0.24.4. Also contains fixes for RUSTSEC-2025-0006.
May 3, 2025
Update to version 1.5.0 (for now, without PPS feature enabled due to potential correctness issues in the code). Release notes: https://github.com/pendulum-project/ntpd-rs/releases/tag/v1.5.0 Also contains the fix for GHSA-v83q-83hj-rw38.
May 3, 2025
Update pnpm to version 10.9.0 to fix CVE-2024-47829 and nodejs-bash-language- server to version 5.6.0
May 3, 2025
https://security-tracker.debian.org/tracker/DSA-5915-1
May 3, 2025
https://security-tracker.debian.org/tracker/DSA-5914-1
May 2, 2025
https://security-tracker.debian.org/tracker/DSA-5913-1
May 2, 2025
TheWizards APT group uses SLAAC spoofing to perform adversary-in-the-middle attacks
ESET researchers analyzed Spellbinder, a lateral movement tool used to perform adversary-in-the-middle attacks
May 2, 2025
Public cloud providers get into the chip market
May 2, 2025
Update to 1.17.4 Fixes CVE-2025-23359 or GHSA-4hmh-pm5p-9j7j
May 2, 2025
Update to 128.10.0 https://www.thunderbird.net/en-US/thunderbird/128.10.0esr/releasenotes/
May 2, 2025
Update to latest upstream (138.0)
May 2, 2025
Update to 1.17.4 Fixes CVE-2025-23359 or GHSA-4hmh-pm5p-9j7j
May 2, 2025
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
May 2, 2025
Update to 1.17.4 Fixes CVE-2025-23359 or GHSA-4hmh-pm5p-9j7j
May 2, 2025
https://security-tracker.debian.org/tracker/DSA-5911-1
May 1, 2025
https://security-tracker.debian.org/tracker/DSA-5910-1
May 1, 2025
https://security-tracker.debian.org/tracker/DSA-5909-1
May 1, 2025
Redis bets big on an open source return
May 1, 2025
Several security issues were fixed in micropython.
May 1, 2025
The following vulnerability has been discovered in the gorilla/csrf package for Go: Prior to 1.7.3, gorilla/csrf did not validate the Origin header against an allowlist. It executed its validation of the Referer header for
May 1, 2025
In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used. (CVE-2025-43965) In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packet_size is mishandled (related to the rendering of all channels in an arbitrary order). (CVE-2025-46393)
May 1, 2025
Multiple vulnerabilties were discovered in u-boot, a boot loader for embedded systems.
May 1, 2025
Multiple vulnerabilities were discovered in nagvis, a visualization addon for Nagios or Icinga. CVE-2021-33178
May 1, 2025
Backport proposed fix for CVE-2025-31344 from OpenMandriva.
May 1, 2025
https://security-tracker.debian.org/tracker/DSA-5912-1
May 1, 2025
Ex-NSA cyber-boss: AI will soon be a great exploit coder
April 30, 2025
In today’s digital world, passwords have become a necessary part of life. But even though you use them for almost everything you do online, you probably don’t give them the thought they truly deserve. May 1, 2025, is World Password Day, a reminder that passwords are the unsung heroes of cybersecurity, the first line of […]
April 30, 2025
Zoho adds AI capabilities to its low code dev platform
April 30, 2025
This month in security with Tony Anscombe – April 2025 edition
From the near-demise of MITRE’s CVE program to a report showing that AI outperforms elite red teamers in spearphishing, April 2025 was another whirlwind month in cybersecurity
April 30, 2025
Meta will offer its Llama AI model as an API too
April 30, 2025
FBI steps in amid rash of politically charged swattings
April 30, 2025
H2O could be made to crash if it received specially crafted network traffic.
April 30, 2025
PostgreSQL could be made to execute arbitrary code if it received specially crafted input.
April 30, 2025
April 30, 2025
* bsc#1233294 * bsc#1235431 Cross-References: * CVE-2024-50205
April 30, 2025
Four essential ingredients of software development
April 30, 2025
Catching up with Angular 19
April 30, 2025
April 30, 2025
* bsc#1239909 Cross-References: * CVE-2025-2588
April 30, 2025
Apiiro launches AI-powered risk analysis map for software
April 30, 2025
https://security-tracker.debian.org/tracker/DSA-5908-1
April 29, 2025
Several security issues were fixed in Mistral.
April 29, 2025
Several security issues were fixed in Mistral.
April 29, 2025
Apache Tomcat could be made to crash if it received specially crafted network traffic.
April 29, 2025
Apache Tomcat could be made to crash if it received specially crafted network traffic.
April 29, 2025
How safe and secure is your iPhone really?
Your iPhone isn’t necessarily as invulnerable to security threats as you may think. Here are the key dangers to watch out for and how to harden your device against bad actors.
April 29, 2025