Toshifumi Sakaguchi discovered that Unbound incorrectly handled name
compression for large RRsets, which could lead to excessive CPU usage.
An attacker could potentially use this issue to cause a denial of service
by sending specially crafted DNS responses.
NetworkManager-libreswan-1.2.24-1.fc39
FEDORA-2024-d20b38c63f
Packages in this update:
NetworkManager-libreswan-1.2.24-1.fc39
Update description:
This is an update to 1.2.24 release of NetworkManager-libreswan, the IPSec VPN plugin for NetworkManager. It fixes a local privilege escalation bug due to improper escaping of Libreswan configuration. (CVE-2024-9050)
NetworkManager-libreswan-1.2.24-1.fc40
FEDORA-2024-e88cc97dba
Packages in this update:
NetworkManager-libreswan-1.2.24-1.fc40
Update description:
This is an update to 1.2.24 release of NetworkManager-libreswan, the IPSec VPN plugin for NetworkManager. It fixes a local privilege escalation bug due to improper escaping of Libreswan configuration. (CVE-2024-9050)
NetworkManager-libreswan-1.2.24-1.fc41
FEDORA-2024-2e8944621e
Packages in this update:
NetworkManager-libreswan-1.2.24-1.fc41
Update description:
This is an update to 1.2.24 release of NetworkManager-libreswan, the IPSec VPN plugin for NetworkManager.
It fixes a local privilege escalation bug due to improper escaping of Libreswan configuration. (CVE-2024-9050)
USN-7079-1: WebKitGTK vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.
No, The Chinese Have Not Broken Modern Encryption Systems with a Quantum Computer
The headline is pretty scary: “China’s Quantum Computer Scientists Crack Military-Grade Encryption.”
No, it’s not true.
This debunking saved me the trouble of writing one. It all seems to have come from this news article, which wasn’t bad but was taken widely out of proportion.
Phishing Attack Impacts Over 92,000 Transak Users
A phishing attack targeting Transak employees led to a data breach, compromising the information of 92,554 users
Meta to Fight Celeb-Bait Scams with Facial Recognition
Meta is testing facial recognition technology to tackle celeb-bait ad scams and enable the recovery of compromised accounts
Think Tanks Urge Action to Curb Misuse of Spyware and Hack-for-Hire
RUSI and Chatham House recommended global standards to combat commercial cyber tool abuse
AI-Powered Attacks Flood Retail Websites
AI tools are being used to launch over half a million cyber-attacks daily on retailers, according to a new report