Zou Dikai discovered a buffer overflow in ngtcp2, a QUIC protocol library. For the oldstable distribution (bookworm), this problem has been fixed in version 0.12.1+dfsg-1+deb12u1. For the stable distribution (trixie), this problem has been fixed in version 1.11.0-1+deb13u1.
People building the future of the social web — interoperable and decentralized — need to protect themselves against copyright liability. Like anyone who creates and operates platforms for user-uploaded content, the hosts of the decentralized social web can take preventive measures to reduce their le...
Threat actors associated with The Gentlemen ransomware‑as‑a‑service (RaaS) operation have been observed attempting to deploy a known proxy malware called SystemBC.
According to new research published by Check Point, the command-and-control (C2 or C&C) server linked to SystemBC has led to the dis...
Oracle shipped VirtualBox 7.2.8 on April 21, 2026, as a maintenance release covering crashes, networking problems, clipboard issues, and extended Linux kernel compatibility. The update touches the VMM layer, NAT networking, graphics, UEFI, and both Linux and Windows guest support. VMM and core stabi...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de RAMÓN GRAU, S.L. (comprenant le prononcé d'une amende de 18 000 €) pour des manquements en lien avec l'utilisation d'un système de vidéosurveillance et la captation sonore sur le lieu de travail. Ce...
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.
New libXpm packages are available for Slackware 15.0 and -current to fix a security issue.
CISA gives federal agencies 4 days to patch America's lead cyber-defense agency has warned that three Cisco Catalyst SD-WAN Manager bugs are under attack, and given federal agencies just four days to patch the security holes.…
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
This is part 1 of a two-part series on agentic AI fraud defense. Since joining Arkose Labs, one of the first things I did was go deep on the threat data — what the attack patterns actually look like, how autonomous systems probe defenses, where classification breaks down and where it holds. That dat...
The Telegram probe was launched after the Canadian Centre for Child Protection shared information that allegedly showed CSAM is present and shared on the platform, according to a press release from Ofcom.
RapidJSON could be made to crash or run programs as an administrator if it opened a specially crafted file.
Apache Commons IO could be made to crash if it received specially crafted input.
When 500,000 Findings Hide 14 Real Threats Modern enterprises ingest vulnerability data from dozens of sources: endpoint detection and response platforms, vulnerability scanners, cloud security posture tools, container image scanners. A large organization can easily accumulate hundreds of thousands...
Magnet Forensics has acquired V2 Forensics, bringing industry-first drone forensics expertise into its end-to-end digital investigation ecosystem to help investigators tackle the growing challenges of UAS evidence.
libcap could be made to modify capabilities on arbitrary files.
Several security issues were fixed in NTFS-3G.
A lawsuit from the Consumer Federation of America accuses Meta of misleading consumers about its efforts to combat scams advertisements on its platforms.
Who are ShinyHunters? Learn how this group exploits SaaS, credentials, and identity-based access—and how to prevent modern data breaches.
The post ShinyHunters: SaaS Breaches & Identity Risks (2026) appeared first on Security Boulevard.
The shift to remote and hybrid work since the pandemic expanded global hiring and accelerated digital onboarding, increasing reliance on online identity verification and remote access.
The post Detection strategies across cloud and identities against infiltrating IT workers appeared first on Microso...