Rsync 3.5 Fixes 33 Security Vulnerabilities at Once
Rsync 3.5 is an extraordinary security update: it closes 33 flaws, including a critical IP-spoofing vulnerability and many symlink-related issues.
Cybersecurity
Wireshark 4.6.8 Fixes 28 Security Vulnerabilities
Wireshark 4.6.8 fixes 28 security vulnerabilities in the network analyzer – nine of which fire simply when opening a crafted capture file.
Microsoft Patch Tuesday: 421 Flaws, One Zero-Day Active
On August Patch Tuesday, Microsoft fixes 421 vulnerabilities – including an actively exploited zero-day and critical RCE flaws in QUIC and the DNS Server.
Flatpak 1.18.1 Fixes Ten CVEs, Including Sandbox Escape
Flatpak 1.18.1 fixes ten CVEs, including a full-filesystem sandbox escape and a local root privilege escalation. Updating is strongly recommended.
OpenSSH 10.5 Fixes Flaws and Speeds Up Releases
OpenSSH 10.5 lands five weeks after 10.4 and fixes three security issues. The team is responding to AI-assisted vulnerability discovery with a faster cadence.
The Fatal Character: How a Single Typo Triggered an RCE Vulnerability in Firefox
Mountain View/London – In the high-stakes world of software engineering, the difference between a secure system and a total compromise
Dangerous Android Malware: “Vapor” Apps Infected Millions of Devices
The “Vapor” malware campaign racked up over 60 million Google Play downloads with 300+ malicious Android apps stealing data and running ad fraud.
DollyWay Malware Compromises 20,000 WordPress Sites Worldwide
The DollyWay malware campaign has compromised over 20,000 WordPress sites since 2016, redirecting visitors to scam pages via a stealthy TDS.
WhatsApp Fixes Zero-Click Security Flaw After Paragon Spyware Attacks
WhatsApp patched a zero-click flaw exploited to plant Paragon’s Graphite spyware on journalists’ and activists’ phones. Here’s what happened.
Synology fixes critical Pwn2Own vulnerabilities
Synology released a security update fixing several critical vulnerabilities uncovered at Pwn2Own, closing NAS exploits that could grant attackers root access.