Firefox users, heads up! A root certificate is expiring soon, potentially disabling add-ons & disrupting DRM content. Update to version 128 (or ESR 115.13+) ASAP to avoid issues! Get the update via Help > About Firefox. More info here: https://cyberinsider.com/firefox-urges-users-to-update-as-root-certificate-expires-on-friday/ #Firefox #SecurityUpdate #Cybersecurity #newz

mailbox.org Userforum – kurzzeitig offline für mehr Sicherheit & Übersichtlichkeit

Am 12. März 2025 um ca. 22 Uhr erhält unser Userforum wichtige Sicherheits- und Usability-Updates. Dafür wird es bis zu 30 Minuten offline sein. Mit dem Update bieten wir einen verbesserten Dokumentenaustausch sowie stärkere Schutzmechanismen.

Das Forum kann während der Wartung nicht genutzt werden, steht danach aber wie gewohnt zur Verfügung. Danke für Ihr Verständnis!

Broadcom warned customers today about three VMware zero-days, tagged as exploited in attacks and reported by the Microsoft Threat Intelligence Center.
#SecurityUpDate #CyberSecurity
#VMWARE
https://www.bleepingcomputer.com/news/security/broadcom-fixes-three-vmware-zero-days-exploited-in-attacks/

Wir haben auf die Mastodon Version 4.3.4 upgedated. Es enthält auch ein Sicherheitsupdate! Sollte dringend durchgeführt werden.

Die Änderungen und Fixes findet ihr hier:
https://github.com/mastodon/mastodon/releases/tag/v4.3.4

Kritische X.Org & Xwayland-Sicherheitslücken! Acht Schwachstellen ermöglichen Codeausführung – Ubuntu & RedHat patchen bereits, SUSE & Debian folgen. Jetzt updaten & Systeme schützen! #Linux #SecurityUpdate #XOrg #CyberSecurity

#Microsoft has fixed an issue that caused Entra ID #DNS authentication failures when using the company's Seamless SSO and Microsoft Entra Connect Sync. #securityupdate https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-entra-id-authentication-issue-caused-by-dns-change/

#OpenSSH has released security updates addressing two vulnerabilities, a man-in-the-middle (MitM) and a denial of service flaw, with one of the flaws introduced over a decade ago. #securityupdate #CyberSecurity
https://www.bleepingcomputer.com/news/security/new-openssh-flaws-expose-ssh-servers-to-mitm-and-dos-attacks/

Microsoft has released the #KB5051974 cumulative update for Windows 10 22H2 and Windows 10 21H2, which automatically installs the new Outlook for Windows app and fixes a memory leak bug. #bug #securityupdate https://www.bleepingcomputer.com/news/microsoft/windows-10-kb5051974-update-force-installs-new-microsoft-outlook-app/

The #JoomlaProject is pleased to announce the availability of Joomla 5.1.3 and 4.4.7:
https://www.joomla.org/announcements/release-news/5910-joomla-5-1-3-and-4-4-7-security-and-bug-fix-release.html
This is an important #SecurityRelease – so don't wait.

RADIUS protocol vulnerable to new Blast-RADIUS attack

https://stackdiary.com/radius-protocol-vulnerable-to-new-blast-radius-attack/

Citrix patches critical NetScaler Console vulnerability

(improper auth: 9.4/10 on CVSS)

https://stackdiary.com/citrix-patches-critical-netscaler-console-vulnerability/

Signal president Meredith Whittaker has addressed concerns about unencrypted encryption keys on Signal desktop and the ability to clone entire sessions undetected.

https://stackdiary.com/signal-under-fire-for-storing-encryption-keys-in-plaintext/

#AfterSpace Update auf Mastodon 4.2.10 erfolgreich durchgeführt.

Bitte weiter tooten <3 #MastoAdmin #critical #SecurityUpdate #SecurityPatch

#AfterSpace Update auf Mastodon 4.2.9 erfolgreich durchgeführt.

Bitte weiter tooten <3 #MastoAdmin #critical #SecurityUpdate

Critical Git vulnerability allows RCE when cloning repositories with submodules (CVE-2024-32002) https://www.helpnetsecurity.com/2024/05/16/git-cve-2024-32002/ #securityupdate #vulnerability #opensource #Don'tmiss #Hotstuff #DevOps #GitHub #News #Git

#WordPress Security Update 6.4.3 jetzt installieren! Es behebt 2 Sicherheitsprobleme, 5 Fehler im Core und 16 Fehler im Block Editor. Wir helfen bei Update-Problemen #securityupdate #wordpresspatch #wordpressupdate #wordpresswartung #wordpresssupport

Atlassian reveals critical Confluence RCE flaw, urges “immediate action” (CVE-2023-22527) https://www.helpnetsecurity.com/2024/01/16/cve-2023-22527/ #AtlassianConfluence #securityupdate #vulnerability #enterprise #Don'tmiss #Atlassian #Hotstuff #News #CVE

Attention WordPress Users

WordPress has just released version 6.4.2, packed with critical security patches and enhancements. Updating immediately is key to safeguarding your site against potential vulnerabilities and ensuring a smooth, secure online experience for your visitors. Don't wait—update now and keep your WordPress site fortified! Oh, and don't forget your backups just to be sure!

https://wordpress.org/news/2023/12/wordpress-6-4-2-maintenance-security-release/

Roundcube webmail is uiteraard geüpdated bij ons. #securityUpdate

This week’s news about the "Looney Tunes flaw" highlighted a condition which can allow a local user to access root privileges from the command line. Part of the RL Security team's task is to have mitigation strategies ready for such cases - reporting vulnerabilities and suggesting fixes upstream, and also writing our own extra packages.

This week, the Security SIG has published our extra packages and formalized a wiki: https://rockylinux.org/news/security-sig-update/ #looneytunables #securityupdate #glibc