Tuesday, May 24, 2022
Latest:

Recent news in security

Security Vulns 

openSUSE: 2022:0145-1 moderate: cacti, cacti-spine>

An update that solves one vulnerability and has one errata is now available.LinuxSecurity – Security AdvisoriesRead More

Security Vulns 

SUSE: 2022:1831-1 important: slurm_20_11>

An update that fixes two vulnerabilities is now available.LinuxSecurity – Security AdvisoriesRead More

Security Vulns 

SUSE: 2022:1829-1 moderate: go1.18>

An update that solves one vulnerability and has one errata is now available.LinuxSecurity – Security AdvisoriesRead More

Vendor

CERTs

Vulnerabilities

Simplifying Power Grid Management for Electric Utilities

Sharing the Spotlight with Dell PowerScale Customers

The Fault in Our kubelets: Analyzing the Security of Publicly Exposed Kubernetes Clusters

Tips to defeat social engineering attacks

Can digital identity help with the world refugee crisis?

Driving Industry 4.0 with predictive AI and networking expertise

Gianpaolo Barrozzi combines science, empathy, and a love of art to reimagine the future of work

Upgrading Mozilla’s Root Store Policy to Version 2.8

Become a Cybersecurity Hero: An Interview with a White Hat Hacker

Clearview AI face-matching service fined a lot less than expected

RT @CERTEU: We welcome the @EUauditors report on the #cybersecurity of EUIBAs 🙏. The call for enhanced preparedness is more timely than eve…

There are ongoing @luxtrust phishing campaigns such as https://t.co/Jyl7wKtXar Be super careful. Don’t hesitate… https://t.co/PWaIZcXYQr

Be careful, there are still ongoing campaigns targeting some LeFoyer customers in Luxembourg, you can see and analy… https://t.co/KAE6eNJ0wb

A good overview of the current state of “Spring4Shell” and the overall overview of the different vulnerabilites (in… https://t.co/WPwc35bkIm

LookyLoo @lookyloo_app released version v1.11 including maintenance and improvements such as multiple captures, imp… https://t.co/46yEvnLGci

“FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files… https://t.co/6Md6GmeoZW

“BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR rec… https://t.co/kBlYtLBAEn

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL , USG FLEX, ATP series VPN, and NSG,… https://t.co/5LSI2H6qoS

“Apperta Foundation OpenEyes 3.5.1 allows remote attackers to view the sensitive information of patients without ha… https://t.co/tLhLYCokU8

https://t.co/uDwAaDG5Fv has been updated and now includes the set of Yara Signature Base from @cyb3rops (thanks!)… https://t.co/nOYzVBfAWK

openSUSE: 2022:0145-1 moderate: cacti, cacti-spine>

SUSE: 2022:1831-1 important: slurm_20_11>

SUSE: 2022:1829-1 moderate: go1.18>

SUSE: 2022:1830-1 important: MozillaFirefox>

SUSE: 2022:1832-1 important: openldap2>

Mitsubishi Electric FA Engineering Software Products (Update E)

Mitsubishi Electric Factory Automation Engineering Products (Update G)

Matrikon OPC Server

CVE-2021-42659

Debian LTS: DLA-3017-1: openldap security update>