Menu

Latest articles

* bsc#1244704 Cross-References: * CVE-2025-6196

Hunters International ransomware group shuts down – but will it regroup under a new guise?
Developing JavaScript apps with AI agents
Risk management in the public cloud is your job

Multiple vulnerabilities are discovered in jpeg-xl, the JPEG XL (“JXL”) image coding library, including out of bounds read/write and stack based buffer overflow, which may cause excessive memory usage and denial of service attacks.

Backport fix for CVE-2025-6199.

5.2.0 release

https://security-tracker.debian.org/tracker/DSA-5958-1

Gamaredon in 2024: Cranking out spearphishing campaigns against Ukraine with an evolved toolset

ESET Research analyzes Gamaredon’s updated cyberespionage toolset, new stealth-focused techniques, and aggressive spearphishing operations observed throughout 2024

Microsoft Windows Firewall complains about Microsoft code
Young Consulting finds even more folks affected in breach mess – now over 1 million
Meta calls €200M EU fine over pay-or-consent ad model ‘unlawful’
SSH Under Siege: Hardening Your Linux Server Against Proxy Abuse
AWS adds incremental and distributed training to Clean Rooms for scalable ML collaboration
Ransomware crew Hunters International shuts down, hands out keys to victims
Model Context Protocol (MCP): Understanding security risks and controls
6 techniques to reduce cloud observability cost
What you need to know about Java wrapper classes
AiSuite: An open-source AI gateway for unified LLM access
Working with Microsoft 365’s new Copilot APIs
Let’s Encrypt rolls out free security certs for IP addresses

The embedded copy of pjproject is affected by a buffer overflow vulnerability, which affects applications that use PJSIP DNS resolver. For the stable distribution (bookworm), this problem has been fixed in

ChatGPT creates phisher’s paradise by recommending the wrong URLs for major companies

Several security issues were fixed in pcs.

Several security issues were fixed in Flask-CORS.

Several security issues were fixed in mongo-c-driver.

Several security issues were fixed in logback.

https://security-tracker.debian.org/tracker/DSA-5957-1

https://security-tracker.debian.org/tracker/DSA-5956-1

Smashing Security podcast #424: Surveillance, spyware, and self-driving snafus
Cisco scores a perfect 10 – sadly for a critical flaw in its comms platform

CVE-2025-6424: A use-after-free in FontFaceSet resulted in a potentially exploitable crash. CVE-2025-6425: An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing

CISA warns the Signal clone used by natsec staffers is being attacked, so patch now
23andMe’s new owner says your DNA is safe this time
ESET Threat Report H1 2025: Key findings

ESET Chief Security Evangelist Tony Anscombe reviews some of the report’s standout findings and their implications for organizations in 2025 and beyond

ESET APT Activity Report Q4 2024–Q1 2025: Malware sharing, wipers and exploits

ESET experts discuss Sandworm’s new data wiper, UnsolicitedBooker’s relentless campaigns, attribution challenges amid tool-sharing, and other key findings from the latest APT Activity Report

Swiss government warns attackers have stolen sensitive data, after ransomware attack at Radix
CISA Warns of CVSS 9.3 MICROSENS NMP Web+ Flaws
US imposes sanctions on second Russian bulletproof hosting vehicle this year

* bsc#1230092 Cross-References: * CVE-2024-45310

Cl0p cybercrime gang’s data exfiltration tool found vulnerable to RCE attacks
Meet Zig: The modern alternative to C
How to use editable installs for Python packages
Anonymity should not be free
UK eyes new laws as cable sabotage blurs line between war and peace

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is aware that an exploit for CVE-2025-6554 exists in the wild.

Australian airline Qantas reveals data theft impacting six million customers

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

https://security-tracker.debian.org/tracker/DSA-5955-1

Microsoft admits to Intune forgetfulness
International Criminal Court swats away ‘sophisticated and targeted’ cyberattack
The AI Fix #57: AI is the best hacker in the USA, and self-learning AI
The Rise of Rust-Based Malware: Memory Safetys Double-Edged Sword
50 customers of French bank hit after insider helped SIM swap scammers
Download the ‘AI-ready data centers’ spotlight report
Terrible tales of opsec oversights: How cybercrooks get themselves caught
How to shift left on finops, and why you need to
The private cloud comeback
Proton bashes Apple and joins antitrust suit that seeks to throw the App Store wide open

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

US shuts down a string of North Korean IT worker scams
British IT worker sentenced to seven months after trashing company network
Scattered Spider crime spree takes flight as focus turns to aviation sector
Sinaloa drug cartel hired a cybersnoop to identify and kill FBI informants

* bsc#1232908 * bsc#1232927 * bsc#1232929 * bsc#1233680 * bsc#1233708

Multiple vulnerabilities have been fixed in catdoc, a text extractor for MS-Office files. CVE-2024-48877

Three steps to boost Amazon S3 data security
Rewriting infrastructure as code for the AI data center
Cloud finally gets some new competition

USN-7582-1 introduced a regression in Samba.

Your browser has ad tech’s fingerprints all over it, but there’s a clean-up squad in town

* bsc#1243711 * bsc#1243712 Cross-References: * CVE-2025-48797

Canada orders Chinese CCTV biz Hikvision to quit the country ASAP
It’s 2025 and almost half of you are still paying ransomware operators

https://security-tracker.debian.org/tracker/DSA-5954-1

This month in security with Tony Anscombe – June 2025 edition

From Australia’s new ransomware payment disclosure rules to another record-breaking DDoS attack, June 2025 saw no shortage of interesting cybersecurity news

Resolves CVE-2024-38824 RHBZ#2372731 Resolves CVE-2024-38824 RHBZ#2372733 Resolves CVE-2025-22239 RHBZ#2372732 Resolves CVE-2025-22239 RHBZ#2372734 Resolves CVE-2025-22236 RHBZ#2372774

4.4.9

Update to release v1.32.6

Update to version 0.16.1 for various bugfixes. This also fixes CVE-2025-22872 in the bundled golang.org/x/net/html.

Resolves CVE-2024-38824 RHBZ#2372731 Resolves CVE-2024-38824 RHBZ#2372733 Resolves CVE-2025-22239 RHBZ#2372732 Resolves CVE-2025-22239 RHBZ#2372734 Resolves CVE-2025-22236 RHBZ#2372774

Update to release v1.32.6

https://security-tracker.debian.org/tracker/DSA-5953-1

ESET Threat Report H1 2025

A view of the H1 2025 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts

Ex-NATO hacker: ‘In the cyber world, there’s no such thing as a ceasefire’
Red Hat Advanced Cluster Security 4.8 simplifies management, enhances workflows and offers deeper external IP visibility
BreachForums broken up? French police arrest five members of notorious cybercrime site

Update to 138.0.7204.49 CVE-2025-6555: Use after free in Animation CVE-2025-6556: Insufficient policy enforcement in Loader CVE-2025-6557: Insufficient data validation in DevTools

Automatic update for podman-5.5.2-1.fc41. security fix for CVE-2025-6032 Changelog for podman * Tue Jun 24 2025 Packit – 5:5.5.2-1 – Update to 5.5.2 upstream release