News
-
LibreOffice and OpenOffice flaws allow code execution through crafted documents
LibreOffice has fixed a Calc vulnerability that can load remote Java code, while Apache OpenOffice has disclosed a related critical flaw affecting versions through 4.1.16.
-
Atlassian patches critical file access flaw across Data Center products
Atlassian has released fixes for a critical file access vulnerability affecting Bitbucket, Confluence, Jira, Bamboo, Crowd, Crucible and Fisheye Data Center deployments.
-
Thousands of European wind and solar systems exposed online
Researchers identified 8,547 internet-facing systems at European wind and solar installations, including interfaces linked to operational equipment across 35 countries.
-
Google pauses open source vulnerability reports after automation flood
Google has stopped accepting new product vulnerability submissions through its open source bug bounty after a surge in automated reports that it says are overwhelmingly invalid.
-
ClingSTUN turns exposed devices into proxy nodes
FortiGuard Labs has identified a Linux backdoor that exploits known flaws across internet-facing devices, establishes persistence and abuses public STUN infrastructure to keep compromised systems reachable.
-
Public exploit raises Rejetto HFS exposure
A public exploit can turn predictable random number generation in vulnerable Rejetto HFS installations into forged administrator sessions and server-side code execution.
-
Roundcube flaw moves into active exploitation
A pre-authentication SQL injection vulnerability patched in Roundcube Webmail in May is now being exploited, increasing exposure for organisations still running affected versions with the vulnerable plugin enabled.
-
Ukraine’s ATB confirms cyberattack as data claim is disputed
Ukrainian retailer ATB has confirmed a cyberattack after an extortion message appeared on its website, while disputing attackers’ claims that customer information was stolen.
-
German intelligence chiefs warn of escalating Russian threat
Germany’s intelligence chiefs have described Russia as the country’s most serious current security challenge as hostile operations spanning cyber activity, sabotage and other hybrid tactics intensify.
-
Italy sets deadline for email tracking pixel compliance
Italy’s privacy regulator says organisations using tracking pixels in email have until 29 October to bring notices, consent and withdrawal mechanisms into line with its guidance.