Read Time:6 Second
FEDORA-2024-020937763e
Packages in this update:
moodle-4.3.5-1.fc40
Update description:
Fix for multiple CVEs
Daily Archives: June 18, 2024
moodle-4.3.5-1.fc39
Read Time:6 Second
FEDORA-2024-9df8ef935b
Packages in this update:
moodle-4.3.5-1.fc39
Update description:
Fix for multiple CVEs
Data breach at Total Fitness exposed almost half a million people’s photos – no password required
Read Time:15 Second
UK-based gym chain Total Fitness has been accused of sloppy security, following the discovery of an unsecured database containing the images of 470,000 members and staff – all accessible to anyone on the internet, no password required.
Read more in my article on the Hot for Security blog.
kitty-0.35.1-4.fc41
Read Time:13 Second
FEDORA-2024-d2ec3e14a7
Packages in this update:
kitty-0.35.1-4.fc41
Update description:
Automatic update for kitty-0.35.1-4.fc41.
Changelog
* Mon Jun 17 2024 Pavel Solovev <daron439@gmail.com> – 0.35.1-4
– rebuild for rhbz#2292712
Multiple Vulnerabilities in VMware Products Could Allow for Remote Code Execution
Read Time:30 Second
Multiple vulnerabilities have been discovered in VMware vCenter Server and Cloud Foundation, the most severe of which could allow for remote code execution. VMware vCenter Server is the centralized management utility for VMware. VMware Cloud Foundation is a multi-cloud platform that provides a full-stack hyperconverged infrastructure (HCI) that is made for modernizing data centers and deploying modern container-based applications. Successful exploitation of these vulnerabilities could allow for remote code execution in the context of the administrator account. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
92% of Organizations Hit by Credential Compromise from Social Engineering Attacks
Read Time:7 Second
A Barracuda report found that 92% of organizations experienced an average of six credential compromises caused by email-based social engineering attacks in 2023
Fake Meeting Software Spreads macOS Infostealer
Read Time:6 Second
Recorded Future has found that Vortax, a purported virtual meeting software, is actually malicious software spreading three information stealers
VMware Discloses Critical Vulnerabilities, Urges Immediate Remediation
Read Time:6 Second
VMware has disclosed critical vulnerabilities impacting its VMware vSphere and VMware Cloud Foundation products, with patches available for customers
ghostscript-10.02.1-4.fc39
Read Time:8 Second
FEDORA-2024-a2d4821fe1
Packages in this update:
ghostscript-10.02.1-4.fc39
Update description:
Fix for issues in gating
Security fix for CVE-2024-33871
Quarter of Firms Suffer an API-Related Breach
Read Time:5 Second
Salt Security study finds 23% of organizations suffered a breach via production APIs in 2023