️
#Update 4/21/25: Microsoft shared an advisory with customers stating the alerts and account lockouts were caused by the invalidation of user refresh tokens that were mistakenly logged into their systems. #CyberSecurity #securityupdate https://www.bleepingcomputer.com/news/microsoft/widespread-microsoft-entra-lockouts-tied-to-new-security-feature-rollout/
Recent searches
Search options
#securityupdate
2 posts2 participants0 posts today
CVE Database Saved: Critical Cybersecurity Resource Gets 11-Month Extension
#CVE #CyberSecurity #CISA #VulnerabilityManagement #InfoSec #CyberThreats #MITRE #CVEExtension #CyberDefense #TechNews #CVEProgram #CWE #SecurityUpdate #CyberCommunity #DataProtection
Read Full Article :-
https://www.techi.com/us-extrends-support-save-mitre-cve-database/
Meta warned Windows users to update the WhatsApp messaging app to the latest version to patch a vulnerability that can let attackers execute malicious code on their devices. #CyberAlerts #securityupdate https://www.bleepingcomputer.com/news/security/whatsapp-flaw-can-let-attackers-run-malicious-code-on-windows-pcs/
Hackers could have owned your AWS servers—easily.
A flaw in Amazon’s SSM Agent let attackers write scripts with root access by gaming plugin IDs (../).
If you haven’t updated—you're still at risk.
#securityupdate #CyberSecurity https://thehackernews.com/2025/04/amazon-ec2-ssm-agent-flaw-patched-after.html
The Hacker NewsAmazon EC2 SSM Agent Flaw Patched After Privilege Escalation via Path TraversalAWS patched an EC2 SSM Agent flaw on March 5, 2025, preventing privilege escalation via plugin ID path traversal.
Android users update now
Google has patched 62 vulnerabilities in Android, including two actively exploited zero-days. #securityupdate https://www.malwarebytes.com/blog/news/2025/04/google-fixes-two-actively-exploited-zero-day-vulnerabilities-in-android?utm_campaign=brandsocial&utm_medium=social&utm_source=facebook
Malwarebytes · Google fixes two actively exploited zero-day vulnerabilities in AndroidGoogle has issued patches for 62 vulnerabilities in Android, including two actively exploited zero-days.
Firefox users, heads up! 
A root certificate is expiring soon, potentially disabling add-ons & disrupting DRM content. Update to version 128 (or ESR 115.13+) ASAP to avoid issues! 
Get the update via Help > About Firefox. More info here: https://cyberinsider.com/firefox-urges-users-to-update-as-root-certificate-expires-on-friday/ #Firefox #SecurityUpdate #Cybersecurity #newz
CyberInsider · Firefox Urges Users to Update As Root Certificate Expires on FridayMozilla has issued an urgent update advisory for Firefox users, warning that they need to update to the latest version before March 14, 2025.
mailbox.org Userforum – kurzzeitig offline für mehr Sicherheit & Übersichtlichkeit
Am 12. März 2025 um ca. 22 Uhr erhält unser Userforum wichtige Sicherheits- und Usability-Updates. Dafür wird es bis zu 30 Minuten offline sein. Mit dem Update bieten wir einen verbesserten Dokumentenaustausch sowie stärkere Schutzmechanismen.
Das Forum kann während der Wartung nicht genutzt werden, steht danach aber wie gewohnt zur Verfügung. Danke für Ihr Verständnis! 
Broadcom warned customers today about three VMware zero-days, tagged as exploited in attacks and reported by the Microsoft Threat Intelligence Center.
#SecurityUpDate #CyberSecurity
#VMWARE
https://www.bleepingcomputer.com/news/security/broadcom-fixes-three-vmware-zero-days-exploited-in-attacks/
BleepingComputer · Broadcom fixes three VMware zero-days exploited in attacks
Wir haben auf die Mastodon Version 4.3.4 upgedated. Es enthält auch ein Sicherheitsupdate! Sollte dringend durchgeführt werden.
Die Änderungen und Fixes findet ihr hier:
https://github.com/mastodon/mastodon/releases/tag/v4.3.4
GitHubRelease v4.3.4 · mastodon/mastodonWarningThis release includes important security fixes.
Corresponding releases are available for the 4.2.x branch and the 4.1.x branch.
Changelog
Security
Update dependencies
Change HTML sanitizat...
Kritische X.Org & Xwayland-Sicherheitslücken! Acht Schwachstellen ermöglichen Codeausführung – Ubuntu & RedHat patchen bereits, SUSE & Debian folgen. Jetzt updaten & Systeme schützen! #Linux #SecurityUpdate #XOrg #CyberSecurity
#Microsoft has fixed an issue that caused Entra ID #DNS authentication failures when using the company's Seamless SSO and Microsoft Entra Connect Sync. #securityupdate https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-entra-id-authentication-issue-caused-by-dns-change/
BleepingComputer · Microsoft fixes Entra ID authentication issue caused by DNS change
#OpenSSH has released security updates addressing two vulnerabilities, a man-in-the-middle (MitM) and a denial of service flaw, with one of the flaws introduced over a decade ago. #securityupdate #CyberSecurity
https://www.bleepingcomputer.com/news/security/new-openssh-flaws-expose-ssh-servers-to-mitm-and-dos-attacks/
BleepingComputer · New OpenSSH flaws expose SSH servers to MiTM and DoS attacks
Microsoft has released the #KB5051974 cumulative update for Windows 10 22H2 and Windows 10 21H2, which automatically installs the new Outlook for Windows app and fixes a memory leak bug. #bug #securityupdate https://www.bleepingcomputer.com/news/microsoft/windows-10-kb5051974-update-force-installs-new-microsoft-outlook-app/
BleepingComputer · Windows 10 KB5051974 update force installs new Microsoft Outlook app
The #JoomlaProject is pleased to announce the availability of Joomla 5.1.3 and 4.4.7:
https://www.joomla.org/announcements/release-news/5910-joomla-5-1-3-and-4-4-7-security-and-bug-fix-release.html
This is an important #SecurityRelease – so don't wait.
Joomla!Joomla 5.1.3 and 4.4.7 Security and Bug Fix ReleaseThe Joomla! Project is pleased to announce the release of Joomla 5.1.3 and Joomla 4.4.7 Security and Bug Fix Release
RADIUS protocol vulnerable to new Blast-RADIUS attack
https://stackdiary.com/radius-protocol-vulnerable-to-new-blast-radius-attack/
Stack Diary · RADIUS protocol vulnerable to new Blast-RADIUS attackThe widely-used RADIUS protocol, essential for network access control, is now threatened by a new vulnerability called "Blast-RADIUS." This security flaw,
Citrix patches critical NetScaler Console vulnerability
(improper auth: 9.4/10 on CVSS)
https://stackdiary.com/citrix-patches-critical-netscaler-console-vulnerability/
Stack Diary · Citrix patches critical NetScaler Console vulnerabilityCitrix has released security updates to address a critical vulnerability in its NetScaler Console, a tool for managing NetScaler instances. The flaw,
Signal president Meredith Whittaker has addressed concerns about unencrypted encryption keys on Signal desktop and the ability to clone entire sessions undetected.
https://stackdiary.com/signal-under-fire-for-storing-encryption-keys-in-plaintext/
Stack Diary · Signal under fire for storing encryption keys in plaintextPopular encrypted messaging app Signal is facing criticism over a security issue in its desktop application. Researchers and app users are raising
#AfterSpace Update auf Mastodon 4.2.10 erfolgreich durchgeführt.
Bitte weiter tooten <3 
#MastoAdmin #critical #SecurityUpdate #SecurityPatch
#AfterSpace Update auf Mastodon 4.2.9 erfolgreich durchgeführt.
Bitte weiter tooten <3 #MastoAdmin #critical #SecurityUpdate
Critical Git vulnerability allows RCE when cloning repositories with submodules (CVE-2024-32002) https://www.helpnetsecurity.com/2024/05/16/git-cve-2024-32002/ #securityupdate #vulnerability #opensource #Don'tmiss #Hotstuff #DevOps #GitHub #News #Git
Help Net Security · Critical Git vulnerability allows RCE when cloning repositories with submodules (CVE-2024-32002) - Help Net SecurityNew versions of Git are out, with fixes for CVE-2024-32002, which can be used to remotely execute code during a "clone" operation.