February 23, 2025
Nearly every aspect of life is connected to the internet, so protecting your devices, identity, and privacy has never been more critical. Cyber threats are no longer just the occasional virus or suspicious email. Phishing scams, ransomware attacks, data breaches, and identity theft are part of a growing list of online dangers that are a […]
February 23, 2025
Cyber threats. Identity theft. Online profiling. Financial fraud. Social media misuse. The list just gets longer. As more aspects of our lives move online and digital devices proliferate, staying safe from threats has become more important than ever. Consider all the connected devices you use for daily tasks—browsing, shopping, banking, gaming, and more. Then think […]
February 23, 2025
OpenText recently surveyed 255 MSPs to uncover key trends shaping the future of Managed Detection and Response (MDR). One technology area it explored was security orchestration, automation, and response (SOAR)—the workhorse behind automating security workflows. The survey revealed several key benefits of SOAR in MDR, highlighting how it can help MSPs and SMBs improve incident […]
February 23, 2025
Security fixes for CVE-2024-11168 and CVE-2025-0938
February 23, 2025
update to 1.33.2 fix CVE-2025-24898
February 23, 2025
Security fixes for CVE-2024-11168 and CVE-2025-0938
February 23, 2025
update to 1.33.2 fix CVE-2025-24898
February 23, 2025
Multiple vulnerabilities have been found in libxml2, a library providing support to read, modify and write XML and HTML files. These vulnerabilities could potentially lead to denial of servie or other unintended behaviors.
February 22, 2025
Update to 133.0.6943.126 CVE-2025-0999: Heap buffer overflow in V8 CVE-2025-1426: Heap buffer overflow in GPU CVE-2025-1006: Use after free in Network
February 22, 2025
This update addresses a null pointer dereferencing issue that could cause the session for a client that sent specially-crafted commands to the server to crash (not the sessions of other clients).
February 22, 2025
This update addresses a null pointer dereferencing issue that could cause the session for a client that sent specially-crafted commands to the server to crash (not the sessions of other clients).
February 22, 2025
Bing Shi discovered that GnuTLS, a portable library which implements the Transport Layer Security and Datagram Transport Layer Security protocols, had inefficient handling of certificate data with a large number of names or name constraints, potentially leading to Denial of
February 21, 2025
* bsc#1236946 Cross-References: * CVE-2024-27856 * CVE-2024-54543
February 21, 2025
Fake job offers target software developers with infostealers
A North Korea-aligned activity cluster tracked by ESET as DeceptiveDevelopment drains victims’ crypto wallets and steals their login details from web browsers and password managers
February 21, 2025
Experts race to extract intel from Black Basta internal chat leaks
February 21, 2025
* bsc#1237084 Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6
February 21, 2025
February 21, 2025
* bsc#1237084 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5
February 21, 2025
February 21, 2025
* bsc#1236560 Cross-References: * CVE-2024-45339
February 21, 2025
February 21, 2025
GenAI is my copilot? Developers play whack-a-hallucination
February 21, 2025
Why enterprises fail at finops
February 21, 2025
Deno update brings OpenTelemetry integration
February 21, 2025
https://security-tracker.debian.org/tracker/DSA-5869-1
February 21, 2025
Apollo GraphQL ships connectors for REST APIs
February 20, 2025
No, you’re not fired – but beware of job termination scams
Some employment scams take an unexpected turn as cybercriminals shift from “hiring” to “firing” staff
February 20, 2025
Two arrested after pensioner scammed out of six-figure crypto nest egg
February 20, 2025
The following vulnerabilities have been discovered in the package mosquitto, MQTT message broker.
February 20, 2025
Microsoft’s first step to scalable quantum computing
February 20, 2025
The 6.12.15 stable kernel update contains a number of important fixes across the tree. The 6.12.14 stable kernel update contains a number of important fixes across the tree.
February 20, 2025
Fix regression of Match directive processing
February 20, 2025
Includes CVE fixes.
February 20, 2025
Update gnutls to the latest upstream release, including a fix for CVE-2024-12243.
February 20, 2025
Security fix for CVE-2025-0938
February 20, 2025
Microsoft updates VS Code C# Dev Kit extension
February 19, 2025
Trump’s DoD CISO pick previously faced security clearance suspension
February 19, 2025
Oracle extends support for on-prem Oracle Database 19c
February 19, 2025
Katharine Hayhoe: The most important climate equation | Starmus highlights
The atmospheric scientist makes a compelling case for a head-to-heart-to-hands connection as a catalyst for climate action
February 19, 2025
* bsc#1237091 Cross-References: * CVE-2025-1244
February 19, 2025
February 19, 2025
* bsc#1237037 * bsc#1237038 Cross-References: * CVE-2025-24970
February 19, 2025
February 19, 2025
* bsc#1237096 Cross-References: * CVE-2024-31068 * CVE-2024-36293
February 19, 2025
Several security issues were fixed in libsndfile.
February 19, 2025
How to use asyncio: Python’s built-in async library
February 19, 2025
Intro to Elixir: A fresh take on functional programming
February 19, 2025
Generative AI vs. the software developer
February 19, 2025
https://security-tracker.debian.org/tracker/DSA-5867-1
February 18, 2025
Large language models: The foundations of generative AI
February 18, 2025
FreSSH bugs undiscovered for years threaten OpenSSH security
February 18, 2025
Time to make C the COBOL of this century
February 18, 2025
* bsc#1237091 Cross-References: * CVE-2025-1244
February 18, 2025
A vulnerability was discovered in pam-pkcs11, a PAM module which allows to use PKCS#11 based smart cards in the PAM authentication stack, which may allow to bypass the authentication in some scenarios.
February 18, 2025
The Qualys Threat Research Unit (TRU) discovered that the OpenSSH client is vulnerable to a machine-in-the-middle attack if the VerifyHostKeyDNS option is enabled (disabled by default).
February 18, 2025
Several security issues were fixed in Docker.
February 18, 2025
Mistral turns focus toward regional LLMs with Saba release
February 18, 2025
The Qualys Threat Research Unit (TRU) discovered that the OpenSSH client is vulnerable to a machine-in-the-middle attack if the VerifyHostKeyDNS option is enabled (disabled by default).
February 18, 2025
Key strategies for MLops success in 2025
February 18, 2025
3 reasons to consider a data security posture management platform
February 18, 2025
Serverless was never a cure-all
February 18, 2025
* bsc#1237096 Cross-References: * CVE-2024-31068 * CVE-2024-36293
February 18, 2025
Indian authorities seize loot from collapsed BitConnect crypto scam
February 18, 2025
https://security-tracker.debian.org/tracker/DSA-5868-1
February 18, 2025
Gaming or gambling? Lifting the lid on in-game loot boxes
The virtual treasure chests and other casino-like rewards inside your children’s games may pose risks you shouldn’t play down
February 17, 2025
What is penetration testing? | Unlocked 403 cybersecurity podcast (ep. 10)
Ever wondered what it’s like to hack for a living – legally? Learn about the art and thrill of ethical hacking and how white-hat hackers help organizations tighten up their security.
February 17, 2025
Neil Lawrence: What makes us unique in the age of AI | Starmus highlights
As AI advances at a rapid clip, reshaping industries, automating tasks, and redefining what machines can achieve, one question looms large: what remains uniquely human?
February 17, 2025
How AI-driven identify fraud is causing havoc
Deepfake fraud, synthetic identities, and AI-powered scams make identity theft harder to detect and prevent – here’s how to fight back
February 17, 2025
Patch or perish: How organizations can master vulnerability management
Don’t wait for a costly breach to provide a painful reminder of the importance of timely software patching
February 17, 2025
How scammers are exploiting DeepSeek’s rise
As is their wont, cybercriminals waste no time launching attacks that aim to cash in on the frenzy around the latest big thing – plus, what else to know before using DeepSeek
February 17, 2025
This month in security with Tony Anscombe – January 2025 edition
DeepSeek’s bursting onto the AI scene, apparent shifts in US cybersecurity policies, and a massive student data breach all signal another eventful year in cybersecurity and data privacy
February 17, 2025
Untrustworthy AI: How to deal with data poisoning
You should think twice before trusting your AI assistant, as database poisoning can markedly alter its output – even dangerously so
February 17, 2025
Roeland Nusselder: AI will eat all our energy, unless we make it tiny | Starmus highlights
Left unchecked, AI’s energy and carbon footprint could become a significant concern. Can our AI systems be far less energy-hungry without sacrificing performance?
February 17, 2025
Brian Greene: Until the end of time | Starmus highlights
The renowned physicist explores how time and entropy shape the evolution of the universe, the nature of existence, and the eventual fate of everything, including humanity
February 17, 2025
Going (for) broke: 6 common online betting scams and how to avoid them
Don’t roll the dice on your online safety – watch out for bogus sports betting apps and other traps commonly set by scammers
February 17, 2025
The evolving landscape of data privacy: Key trends to shape 2025
Incoming laws, combined with broader developments on the threat landscape, will create further complexity and urgency for security and compliance teams
February 17, 2025
Under lock and key: Protecting corporate data from cyberthreats in 2025
Data breaches can cause a loss of revenue and market value as a result of diminished customer trust and reputational damage
February 17, 2025
UEFI Secure Boot: Not so secure
ESET researchers uncover a vulnerability in a UEFI application that could enable attackers to deploy malicious bootkits on unpatched systems
February 17, 2025