January 30, 2024
Protecting against software supply chain attacks
UK biometrics boss bows out, bemoaning bureaucratic blunders
January 30, 2024
The container bci/python was updated. The following patches have been included in this update:
January 30, 2024
The container bci/php-fpm was updated. The following patches have been included in this update:
January 30, 2024
The container bci/golang was updated. The following patches have been included in this update:
January 30, 2024
The container bci/golang was updated. The following patches have been included in this update:
January 30, 2024
https://security-tracker.debian.org/tracker/DSA-5611-1
January 30, 2024
Trickbot malware developer jailed for five years
January 29, 2024
Best Practices for WordPress Site Security on Linux Webservers
January 29, 2024
Exim could be made to bypass an SPF protection mechanism if it received a specially crafted request.
January 29, 2024
The container bci/bci-sle15-kernel-module-devel was updated. The following patches have been included in this update:
January 29, 2024
The container suse/rmt-mariadb was updated. The following patches have been included in this update:
January 29, 2024
The container suse/rmt-mariadb-client was updated. The following patches have been included in this update:
January 29, 2024
The container suse/nginx was updated. The following patches have been included in this update:
January 29, 2024
Security fix for CVE-2023-48795
January 29, 2024
Top 3 Cybersecurity Trends for SME Business Leaders
January 29, 2024
750 million Indian mobile subscribers’ info for sale on dark web
January 28, 2024
https://security-tracker.debian.org/tracker/DSA-5608-1
January 28, 2024
Several vulnerabilities were discovered in the Slurm Workload Manager, a cluster resource management and job scheduling system, which may result in privilege escalation, denial of service, bypass of message hash checks or opening files with an incorrect set of extended groups.
January 28, 2024
The container bci/ruby was updated. The following patches have been included in this update:
January 28, 2024
The container bci/python was updated. The following patches have been included in this update:
January 28, 2024
The container suse/postgres was updated. The following patches have been included in this update:
January 28, 2024
The container suse/postgres was updated. The following patches have been included in this update:
January 28, 2024
The container bci/php was updated. The following patches have been included in this update:
January 28, 2024
https://security-tracker.debian.org/tracker/DSA-5609-1
January 28, 2024
Blackwood hijacks software updates to deploy NSPX30 – Week in security with Tony Anscombe
The previously unknown threat actor used the implant to target Chinese and Japanese companies, as well as individuals in China, Japan, and the UK
January 27, 2024
Assessing and mitigating supply chain cybersecurity risks
Blindly trusting your partners and suppliers on their security posture is not sustainable – it’s time to take control through effective supplier risk management
January 27, 2024
The container suse/sle15 was updated. The following patches have been included in this update:
January 27, 2024
The container bci/rust was updated. The following patches have been included in this update:
January 27, 2024
The container suse/rmt-server was updated. The following patches have been included in this update:
January 27, 2024
The container bci/php-apache was updated. The following patches have been included in this update:
January 27, 2024
The container bci/dotnet-runtime was updated. The following patches have been included in this update:
January 27, 2024
The container bci/dotnet-sdk was updated. The following patches have been included in this update:
January 27, 2024
* bsc#1218571 Cross-References: * CVE-2023-7207
January 26, 2024
* bsc#1218728 Cross-References: * CVE-2024-23301
January 26, 2024
* bsc#1218802 Cross-References: * CVE-2023-51257
January 26, 2024
* bsc#1218802 Cross-References: * CVE-2023-51257
January 26, 2024
* bsc#1218955 Cross-References: * CVE-2024-0741 * CVE-2024-0742
January 26, 2024
Update to 115.7.0 * https://www.mozilla.org/en- US/security/advisories/mfsa2024-04/ * https://www.thunderbird.net/en- US/thunderbird/115.7.0/releasenotes/
January 26, 2024
https://security-tracker.debian.org/tracker/DSA-5607-1
January 25, 2024
AI is already being used by ransomware gangs, warns NCSC
January 25, 2024
EquiLend drags systems offline after admitting attacker broke in
January 25, 2024
* bsc#1205463 * bsc#1218189 Cross-References: * CVE-2022-45047
January 25, 2024
* bsc#1218955 Cross-References: * CVE-2024-0741 * CVE-2024-0742
January 25, 2024
* bsc#1218955 Cross-References: * CVE-2024-0741 * CVE-2024-0742
January 25, 2024
The chromium-browser-stable package has been updated to the 120.0.6099.224 release. 4 vulnerabilities are fixed; some of them are listed below: High CVE-2024-0517: Out of bounds write in V8. Reported by Toan (suto) Pham of Qrious Secure on 2024-01-06.
January 25, 2024
The updated packages fix security vulnerabilities: A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record. (CVE-2023-38469) A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function. (CVE-2023-38470)
January 25, 2024
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
January 25, 2024
HPE joins the ‘our executive email was hacked by Russia’ club
January 25, 2024
https://security-tracker.debian.org/tracker/DSA-5604-1
January 24, 2024
https://security-tracker.debian.org/tracker/DSA-5603-1
January 24, 2024
Mobb unveils vulnerability fixer for GitHub users
January 24, 2024
SEC Twitter hack blamed on SIM swap attack
January 24, 2024
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.
January 24, 2024
A vulnerability has been discovered in sudo which can lead to execution manipulation through rowhammer-style memory manipulation.
January 24, 2024
Multiple vulnerabilities have been discovered in GOCR, the worst of which could lead to arbitrary code execution.
January 24, 2024
Multiple vulnerabilities have been discovered in Ruby, the worst of which could lead to execution of arbitrary code.
January 24, 2024
Backport fix for CVE-2023-51257.
January 24, 2024
Mitigate CVE-2024-0690
January 24, 2024
https://security-tracker.debian.org/tracker/DSA-5606-1
January 24, 2024
https://security-tracker.debian.org/tracker/DSA-5605-1
January 24, 2024
Accused PII seller faces jail for running underground fraud op
January 23, 2024
A guide to implementing fine-grained authorization
January 23, 2024
Atlassian Confluence Server RCE attacks underway from 600+ IPs
January 22, 2024
Subway’s data torpedoed by LockBit, ransomware gang claims
January 22, 2024
ICO fines spam slinging financial services biz
January 22, 2024
Safeguarding against the global ransomware threat
January 22, 2024
Why many CISOs consider quitting – Week in security with Tony Anscombe
The job of a CISO is becoming increasingly stressful as cybersecurity chiefs face overwhelming workloads and growing concerns over personal liability for security failings
January 20, 2024
Virtual kidnapping: How to see through this terrifying scam
Phone fraud takes a frightening twist as fraudsters can tap into AI to cause serious emotional and financial damage to the victims
January 20, 2024
The container suse/sle15 was updated. The following patches have been included in this update:
January 20, 2024
The container bci/bci-sle15-kernel-module-devel was updated. The following patches have been included in this update:
January 20, 2024
The container bci/rust was updated. The following patches have been included in this update:
January 20, 2024