Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 42: Addressing CEF High Security Vulnerabilities CVE-2025-14765
Update to cef-143.0.10+g8aed01b + chromium-143.0.7499.146 (rhbz#2423482) High CVE-2025-14765: Use after free in WebGPU High CVE-2025-14766: Out of bounds read …
Debian: webkit2gtk Important Memory Corruption Issues DSA-6083-1
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-14174 Apple and the Google Threat Analysis Group discovered that proce…
Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild
Apple on Friday released security updates for iOS, iPadOS, macOS, tvOS, watchOS, visionOS, and its Safari web browser to address two security flaws that it sai…
Fedora 42: Chromium High CVE-2025-13630, 13631, 13632 Advisory
Update to 143.0.7499.40 * High CVE-2025-13630: Type Confusion in V8 * High CVE-2025-13631: Inappropriate implementation in Google Updater * High CVE-2025-13632…
Fedora 43: chromium High CVE-2025-13630 Type Confusion and more
Update to 143.0.7499.40 * High CVE-2025-13630: Type Confusion in V8 * High CVE-2025-13631: Inappropriate implementation in Google Updater * High CVE-2025-13632…
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More
This week saw a lot of new cyber trouble. Hackers hit Fortinet and Chrome with new 0-day bugs. They also broke into supply chains and SaaS tools. Many hid insi…
ThreatsDay Bulletin: MS Teams Hack, MFA Hijacking, $2B Crypto Heist, Apple Siri Probe & More
Cyber threats are evolving faster than ever. Attackers now combine social engineering, AI-driven manipulation, and cloud exploitation to breach targets once co…
Ubuntu: Kernel Critical Updates Network DoS Vulnerabilities 2025:0011-1
Canonical has released a coordinated set of Ubuntu kernel advisories, including USN-7789-2, USN-7792-3, USN-7809-1, USN-7810-1, and USN-7811-1. Each update add…
Debian: DSA-6004-1: chromium
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is awar…
Debian: DSA-6004-1 Chromium Critical Arbitrary Code Exec Threat
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is awar…
Phoenix RowHammer Attack Bypasses Advanced DDR5 Memory Protections in 109 Seconds
A team of academics from ETH Zürich and Google has discovered a new variant of a RowHammer attack targeting Double Data Rate 5 (DDR5) memory chips from South K…
Critical Linux Kernel Bug Grants Attackers Full Kernel-Level Control from Chrome Sandbox
Let's talk about CVE-2025-38236 . If you've been following the Linux kernel's security track record, you already know how hard developers work to keep it solid…
Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure
The notorious cybercrime group known as Scattered Spider is targeting VMware ESXi hypervisors in attacks targeting retail, airline, and transportation sectors …
Breaking Down CVE-2025-6558: Chromes Latest Actively Exploited 0-Day
Let's talk about CVE-2025-6558 ''the latest zero-day vulnerability in Google Chrome. If you're managing Linux systems or handling infosec at any level, you sho…
Debian: Chromium Important RCE and DoS Issue DSA-5963-1 CVE-2025-6558
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is awar…
Zero-Day Alert: Chrome's V8 Security Flaw Fixed in Emergency Patch
If you're a Linux admin or happen to be neck-deep in infosec, here's something worth your immediate attention: a critical security hole in Google Chrome'' CVE-…
Debian DSA-5955-1 CVE-2025-6554 critical: chromium code execution risk
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is awar…
New Chrome Security Vulnerabilities Require Urgent Action
Two new Chrome vulnerabilities have surfaced, and despite how often we hear about Chrome in the news, these bugs are not the kind we can afford to brush off. B…
Debian: DSA-5935-1 severe: chromium code execution and info leak
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is awar…
Hazy Hawk Exploits DNS Records to Hijack CDC, Corporate Domains for Malware Delivery
A threat actor known as Hazy Hawk has been observed hijacking abandoned cloud resources of high-profile organizations, including Amazon S3 buckets and Microsof…
Learning How to Hack: Why Offensive Security Training Benefits Your Entire Security Team
Organizations across industries are experiencing significant escalations in cyberattacks, particularly targeting critical infrastructure providers and cloud-ba…
20-Year Browser History Privacy Flaw Prompts Chrome 136 Release
Google Chrome 136 is here, and it's not just another version bump''it addresses critical security vulnerabilities, including a long-standing privacy risk tied …
From Third-Party Vendors to U.S. Tariffs: The New Cyber Risks Facing Supply Chains
IntroductionCyber threats targeting supply chains have become a growing concern for businesses across industries. As companies continue to expand their relianc…
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [10 February]
In cybersecurity, the smallest crack can lead to the biggest breaches. A leaked encryption key, an unpatched software bug, or an abandoned cloud storage bucket…