WordPress 7.1.4: Update Closes Flaw as Exploit Attempts Begin
WordPress 7.1.4 fixes about two dozen flaws, including one that lets attackers inject code during a core update and that is already under attack.
News & Knowledge
News, guides and insights on hosting, security and IT.
Ruby: Regex Engine Bugs Are Behind Critical GitLab Flaws
Three bugs in Ruby's Onigmo regex engine are behind the critical GitLab flaws and put every Ruby app that compiles untrusted patterns at risk.
Google Chrome: Multiple Vulnerabilities, Time to Update
Several flaws in Google Chrome allow code execution and data access, among other things, and an update plus browser restart fixes them.
Cisco Firewalls and GitLab: Attackers Exploit Known Flaws
Attackers are exploiting a DoS flaw in the SSL VPN of Cisco ASA and FTD and a critical GitLab flaw where updating GitLab alone is not always enough.
GitHub Worm Hides From Code Search: 42 Repositories Booby-Trapped
JFrog found 42 GitHub repositories that launch a credential-stealing worm when opened with AI assistants or VS Code.
CISA Warns of Attacks on VMware ESX and Outdated Linux Kernels
CISA confirms attacks on a logging flaw in VMware ESX and on the Linux kernel flaw Fragnesia, which is being used after php2shell break-ins.
Intel Shares Plunge as High Memory Prices Slow the PC Market
Intel expects lower revenue than anticipated this quarter because high memory prices are slowing sales of PCs and other devices.
16-Year-Old UEFI Flaw Puts Servers at Risk During PXE Boot
A critical flaw in EDK II lets attackers run code during PXE boot on servers, before the operating system and Secure Boot.
Brotli, Adobe Commerce and Magento: Attackers Are Already Exploiting the Flaws
Attackers are already exploiting the Brotli flaw Broccoli2Shell and a critical vulnerability in Adobe Commerce and Magento.