Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Defenders Be Prepared: Cyberattacks Surge Against Linux Amid Cloud Migration
Ransomware in particular poses a major threat, but security vendors say there has been an increase in Linux-targeted cryptojacking, malware, and vulnerability …
Google Debugs, JFrog Jumps Code, Confidential Kubernetes, Meta-PyTorch
As the open-source model continues to prove its sustainability in the enterprise, the software community is ramping up its security-mindedness. That concern wa…
Gentoo: GLSA-202208-35: Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities
Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution.
Gentoo: GLSA-202208-25: Chromium, Google Chrome, Microsoft Edge, QtWebEngine: Multiple Vul
Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution.
Fedora 35: owncloud-client 2022-d6faaa50eb
Security fix for CVE-2021-44537
Fedora 36: owncloud-client 2022-8d623b4c3f
Security fix for CVE-2021-44537
Google Wants to Make Linux Kernel Flaws Harder to Exploit
'Experimental mitigations' in a custom kernel could make life harder for hackers.
SUSE: 2022:2044-1 important: google-gson
An update that fixes one vulnerability, contains one feature is now available.
GitHub Enterprise Server 3.5 Released with Dependabot and More, but Cloud Version Gets Features First
GitHub Enterprise Server, the self-hosted version of the code shack's platform, has hit version 3.5. The company said there are over 60 new features, including…
SUSE: 2022:1654-1 important: documentation-suse-openstack-cloud, kibana, openstack-keyst
An update that solves two vulnerabilities and has one errata is now available.
Fedora 35: golang-github-google-slothfs 2022-3a638977
Rebuild for CVE-2022-27191
Fedora 35: golang-github-googleapis-gnostic 2022-3a638977
Rebuild for CVE-2022-27191
SafeDNS: Cloud-based Internet Security and Web Filtering Solution for MSPs
Remote workplace trend is getting the upper hand in 2022. A recent survey by IWG (the International Workplace Group) determined that 70% of the world's profess…
Squirrel Engine Bug Could Let Attackers Hack Games and Cloud Services
Researchers have disclosed an out-of-bounds read vulnerability in the Squirrel programming language that can be abused by attackers to break out of the sandbox…
Google stakes new Secure Open Source rewards program for developers with $1M seed mon
The Secure Open Source (SOS) Rewards pilot program, run by the Linux Foundation, will reward developers with potentially more than $10,000 for enhancing the se…
Preventing your Cloud 'Secrets' from Public Exposure: An IDE plugin solution
I'm sure you would agree that, in today's digital world, the majority of applications we work on require some type of credentials ' to connect to a database wi…
Cybersecurity Executive Order 2021: What It Means for Cloud and SaaS Security
In response to malicious actors targeting US federal IT systems and their supply chain, the President released the "Executive Order on Improving the Nation's C…
openSUSE: 2021:0577-1 important: nextcloud-deskt
An update that fixes one vulnerability is now available.
BRATA Malware Poses as Android Security Scanners on Google Play Store
A new set of malicious Android apps have been caught posing as app security scanners on the official Play Store to distribute a backdoor capable of gathering s…
Google Researcher Reported 3 Flaws in Apache Web Server Software
If your web-server runs on Apache, you should immediately install the latest available version of the server application to prevent hackers from taking unautho…
How AppTrana Managed Cloud WAF Tackles Evolving Attacking Techniques
Web applications suffer continuously evolving attacks, where a web application firewall (WAF) is the first line of defense and a necessary part of organization…
Google Chrome Bug Could Let Hackers Bypass CSP Protection; Update Web Browsers
If you haven't recently updated your Chrome, Opera, or Edge web browser to the latest available version, it would be an excellent idea to do so as quickly as p…
openSUSE: 2020:1014-1: important: google-compute-engi
An update that fixes three vulnerabilities is now available.
openSUSE: 2020:0996-1: important: google-compute-engi
An update that fixes three vulnerabilities is now available.