Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
New Cuttlefish Malware Hijacks Router Connections, Sniffs for Cloud Credentials
A new malware called Cuttlefish is targeting small office and home office (SOHO) routers with the goal of stealthily monitoring all traffic through the devices…
AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials
Cybersecurity researchers have shed light on a tool referred to as AndroxGh0st that's used to target Laravel applications and steal sensitive data."It works by…
SUSE: 2024:0806-1 important: google-oauth-java-client
* bsc#1199188 Cross-References: * CVE-2021-22573
Five Eyes Agencies Expose APT29's Evolving Cloud Attack Tactics
Cybersecurity and intelligence agencies from the Five Eyes nations have released a joint advisory detailing the evolving tactics of the Russian state-sponsored…
Gentoo: GLSA-202402-23: Chromium, Google Chrome, Microsoft Edge: Multi
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.
Gentoo: GLSA-202401-34: Chromium, Google Chrome, Microsoft Edge: Multi
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.
SUSE: 2024:0128-1 moderate: cloud-init
* bsc#1198269 * bsc#1201010 * bsc#1214169 * bsc#1215740 * bsc#1215794
LUCR-3: Scattered Spider Getting SaaS-y in the Cloud
LUCR-3 overlaps with groups such as Scattered Spider, Oktapus, UNC3944, and STORM-0875 and is a financially motivated attacker that leverages the Identity Prov…
Agile Approach to Mass Cloud Credential Harvesting and Crypto Mining Sprints Ahead
Developers are not the only people who have adopted the agile methodology for their development processes. From 2023-06-15 to 2023-07-11, Permiso Security’s p0…
Sophisticated BundleBot Malware Disguised as Google AI Chatbot and Utilities
A new malware strain known as BundleBot has been stealthily operating under the radar by taking advantage of.NET single-file deployment techniques, enabling th…
openSUSE: 2023:0171-1 important: nextcloud-desktop
An update that fixes 5 vulnerabilities is now available.
Gentoo: GLSA-202305-10: Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities
Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution.
Oracle8: ELSA-2023-12298: cloud-init Important Security Update
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Oracle9: ELSA-2023-12299: cloud-init Important Security Update
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Linux Kernel Logic Allowed Spectre Attack on 'Major Cloud Provider'
The Spectre vulnerability that has haunted hardware and software makers since 2018 continues to defy efforts to bury it.
openSUSE: 2023:0083-1 important: nextcloud
An update that fixes three vulnerabilities is now available.
New MacStealer macOS Malware Steals iCloud Keychain Data and Passwords
A new information-stealing malware has set its sights on Apple's macOS operating system to siphon sensitive information from compromised devices.DubbedMacSteal…
Amazon Linux 2023, a Cloud-Optimized Linux Distro, Is Now Available
Earlier this week, Amazon announced the availability of Amazon Linux 2023, its third-generation Linux distribution. With this distribution, Amazon is promising…
Consider Open Source Software While Evaluating The Security Of Cloud Applications
The pace of software development is accelerating. Devops teams are under more pressure to launch products rapidly, and they are able to do so in part because o…
Get Unified Cloud and Endpoint Security: Only $1 for 1,000 Assets for all of 2023!
As the new year begins, it's more important than ever to protect your business from the constantly evolving cyber threats that could compromise your valuable a…
Malicious PyPI Packages Using Cloudflare Tunnels to Sneak Through Firewalls
In yet another campaign targeting the Python Package Index (PyPI) repository, six malicious packages have been found deploying information stealers on develope…
An Enterprises Guide To Strengthening Linux Cloud Security
Technology, in many ways, has changed the way people do business. Modern society is highly digitalized, thanks to technological advancements in the Internet of…
4 Reasons Open Source Matters for Cloud Security
When we depend on an open commons as our computing foundation, we need it to be secure, and the most effective way to do that is through open solutions.
SUSE: 2022:3706-1 moderate: google-gson
An update that fixes one vulnerability, contains one feature is now available.