USN-6941-1: Python vulnerability
It was discovered that the Python ipaddress module contained incorrect information about which IP address ranges were considered “private” or “globally reachable”. This could possibly...
Education in Secure Software Development
The Linux Foundation and OpenSSF released a report on the state of education in secure software development. …many developers lack the essential knowledge and skills...
bind-9.18.28-2.fc39 bind-dyndb-ldap-11.10-26.fc39
FEDORA-2024-ef8a7031e7 Packages in this update: bind-9.18.28-2.fc39 bind-dyndb-ldap-11.10-26.fc39 Update description: Update to BIND 9.18.28 Security Fixes A malicious DNS client that sent many queries over TCP...
Cencora Confirms Patient Data Stolen in Cyber-Attack
Pharma company Cencora confirmed in an updated SEC filing that sensitive personal and health data was exfiltrated by attackers in a February 2024 incident Read...
E-Commerce Fraud Campaign Uses 600+ Fake Sites
The “Eriakos” info-stealing campaign is using hundreds of fake web shops to defraud victims Read More
BEC Attacks Surge 20% Annually Thanks to AI Tooling
A Vipre study reveals a 20% increase in business email compromise attacks Read More
frr-8.5.5-1.fc39
FEDORA-2024-0c063be1cc Packages in this update: frr-8.5.5-1.fc39 Update description: New version 8.5.5 Read More
USN-6940-1: snapd vulnerabilities
Neil McPhail discovered that snapd did not properly restrict writes to the $HOME/bin path in the AppArmor profile for snaps using the home plug. An...
ZDI-24-1041: Google Chrome Updater DosDevices Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Google Chrome. An attacker must first obtain the ability to execute low-privileged code...
ZDI-24-1042: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on...