Menu

Latest articles

update to 124.0.6367.155 High CVE-2024-4558: Use after free in ANGLE High CVE-2024-4559: Heap buffer overflow in WebAudio

Security fix for CVE-2023-45681 / CVE-2023-47212

Security fix for CVE-2023-45681 / CVE-2023-47212

update to 124.0.6367.155 High CVE-2024-4558: Use after free in ANGLE High CVE-2024-4559: Heap buffer overflow in WebAudio

https://www.mediawiki.org/wiki/Release_notes/1.41

Fix for CVE-2024-2397

Iran most likely to launch destructive cyber-attack against US – ex-Air Force intel analyst
Cybercriminals hit jackpot as 500k+ Ohio Lottery lovers lose out on their personal data
Microsoft’s Brad Smith summoned by Homeland Security committee over ‘cascade’ of infosec failures
GhostStripe attack haunts self-driving cars by making them ignore road signs
Boeing refused to pay $200 million LockBit ransomware demand
‘Four horsemen of cyber’ look back on 2008 DoD IT breach that led to US Cyber Command

* bsc#1222849 Cross-References: * CVE-2024-32487

* bsc#1216644 * bsc#1219079 * bsc#1219435 * bsc#1220828

* bsc#1218424 * bsc#1224017 * bsc#1224018 Cross-References:

* bsc#1212475 * bsc#1224017 Cross-References: * CVE-2024-24787

* bsc#1223852 Cross-References: * CVE-2023-52722

* bsc#1223979 Cross-References: * CVE-2024-34069

https://security-tracker.debian.org/tracker/DSA-5687-1

RHEL 9.4 Unveiled: Elevating Enterprise Security with Cutting-Edge Features
$10 million reward offer for apprehension of unmasked LockBit ransomware leader
Ex-White House election threat hunter weighs in on what to expect in November

https://security-tracker.debian.org/tracker/DSA-5685-1

US faith-based healthcare org Ascension says ‘cybersecurity event’ disrupted clinical ops
Dell customer order database of ’49M records’ stolen, now up for sale on dark web
Global attackers targeting US critical infrastructure should be ‘wake-up call’
GitHub takes aim at software supply chain security

Congratulations, graduates! As you gear up for life after high school or college, you’re stepping into a world of exciting firsts—new jobs, new homes, and new adventures. There’s one first you might not have considered: your first identity protection plan. Why is identity protection important? Let’s dive in. Why protecting your identity matters Imagine this: […]

FBI warns US retailers that hackers are targeting their gift card systems

* bsc#1223100 Cross-References: * CVE-2023-3758

* bsc#1223852 Cross-References: * CVE-2023-52722

* bsc#1216853 Cross-References: * CVE-2023-38472

* bsc#1222492 Cross-References: * CVE-2024-21506

* bsc#1223979 Cross-References: * CVE-2024-34069

* bsc#1218424 * bsc#1224017 * bsc#1224018 Cross-References:

Unleashing the potential of Intel® IPU with Red Hat OpenShift
Cancer patients’ sensitive information accessed by “unidentified parties” after being left exposed by screening lab for years

https://security-tracker.debian.org/tracker/DSA-5686-1

https://security-tracker.debian.org/tracker/DSA-5682-2

https://security-tracker.debian.org/tracker/DSA-5684-1

What do Europeans, Americans and Australians have in common? Scammed $50M by fake e-stores
Smashing Security podcast #371: Unmasking LockBitsupp, company extortion, and a Tinder fraudster
Undersea cables must have high-priority protection before they become top targets

https://security-tracker.debian.org/tracker/DSA-5682-1

How to inspire the next generation of scientists | Unlocked 403: Cybersecurity podcast

As Starmus Earth draws near, we caught up with Dr. Garik Israelian to celebrate the fusion of science and creativity and venture where imagination flourishes and groundbreaking ideas take flight

CISA boss: Secure code is the ‘only way to make ransomware a shocking anomaly’
One year on, universities org admits MOVEit attack hit data of 800K people

* bsc#1189495 * bsc#1211301 * bsc#1219559 * bsc#1219666 * bsc#1221260

* bsc#1189495 * bsc#1191175 * bsc#1218686 Cross-References:

UK opens investigation of MoD payroll contractor after confirming attack

Multiple vulnerabilities have been discovered in NVIDIA Drivers, the worst of which could result in root privilege escalation.

A vulnerability has been discovered in Epiphany, which can lead to a buffer overflow.

Multiple vulnerabilities have been discovered in qtsvg, the worst of which could lead to a denial of service.

Multiple vulnerabilities have been discovered in MariaDB, the worst fo which can lead to arbitrary execution of code.

Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight
From infosec to skunks, RSA Conference SVP spills the tea
UnitedHealth’s ‘egregious negligence’ led to Change Healthcare ransomware infection

https://security-tracker.debian.org/tracker/DSA-5683-1

America’s War on Drugs and Crime will be AI powered, says Homeland Security boss
Watch out for rogue DHCP servers decloaking your VPN connections
CISA’s early-warning system helped critical orgs close 852 ransomware holes
TikTok sues America to undo divest-or-die law
Cops finally unmask ‘LockBit kingpin’ after two-month tease
Fortifying Email Security with Infosec Through the SDLC
The truth about KEV: CISA’s vuln deadlines good influence on private-sector patching
Brit security guard biz exposes 1.2M files via unprotected database
Does cloud security have a bad reputation?

* bsc#1223252 Cross-References: * CVE-2024-30171

* bsc#1221984 * bsc#1222302 * bsc#1222453 Cross-References:

* bsc#1027519 * bsc#1221984 * bsc#1222302 * bsc#1222453

* bsc#1216644 * bsc#1219079 * bsc#1219435 Cross-References:

Multiple vulnerabilities have been discovered in libjpeg-turbo, the worst of which could lead to arbitrary code execution.

Multiple vulnerabilities have been discovered in Xpdf, the worst of which could possibly lead to arbitrary code execution.

Ransomware crooks now SIM swap executives’ kids to pressure their parents
Google, Meta, Spotify break Apple’s device fingerprinting rules – new claim
Fed-run LockBit site back from the dead and vows to really spill the beans on gang
Mastodon delays firm fix for link previews DDoSing sites

As we navigate through 2024, the cyber threat landscape continues to evolve, bringing new challenges for both businesses and individual consumers. The latest OpenText Threat Report provides insight into these changes, offering vital insights that help us prepare and protect ourselves against emerging threats. Here’s what you need to know: The Resilience of Ransomware Ransomware […]

Consultant charged over $1.5M extortion scheme against IT giant
CISA says ‘no more’ to decades-old directory traversal bugs

* bsc#1215947 * bsc#1216853 Cross-References: * CVE-2023-38470

* bsc#1170848 * bsc#1208572 * bsc#1214340 * bsc#1214387 * bsc#1216085

* bsc#1219912 * bsc#1221465 * bsc#1222155 * jsc#MSQA-760 * jsc#PED-7893

* bsc#1008037 * bsc#1008038 * bsc#1010940 * bsc#1019021 * bsc#1038785

* bsc#1211649 * bsc#1211888 * bsc#1216850 * bsc#1218482 * bsc#1219001

* bsc#1211649 * bsc#1211888 * bsc#1216850 * bsc#1218482 * bsc#1219001

Germany points finger at Fancy Bear for widespread 2023 hacks, DDoS attacks

https://security-tracker.debian.org/tracker/DSA-5681-1

https://security-tracker.debian.org/tracker/DSA-5680-1

Pay up, or else? – Week in security with Tony Anscombe

Organizations that fall victim to a ransomware attack are often caught between a rock and a hard place, grappling with the dilemma of whether to pay up or not

End-to-end encryption may be the bane of cops, but they can’t close that Pandora’s Box

Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to remote code execution.

Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to remote code execution.

A vulnerability has been discovered in borgmatic, which can lead to shell injection.

Multiple vulnerabilities have been discovered in Pillow, the worst of which can lead to arbitrary code execution.

Multiple vulnerabilities have been discovered in MIT krb5, the worst of which could lead to remote code execution.

A vulnerability has been discovered in Setuptools, which can lead to denial of service.

https://security-tracker.debian.org/tracker/DSA-5679-1

https://security-tracker.debian.org/tracker/DSA-5678-1

https://security-tracker.debian.org/tracker/DSA-5677-1