CVE Foundation Emerges From Stealth to Rescue CVE Program

The rapid defunding and refunding of the CVE Project is just another sign of the destabilization our government is currently experiencing.

High-Priority PuTTY Vulnerability Threatens Server Access Security

PuTTY’s security flaw (CVE2024-31497) in ECDSA P521 keys risks private data exposure. Urgent update is needed.
The post High-Priority PuTTY Vulnerability Threatens Server Access Security appeared first on Linux Today.

KBOM Enhances Cloud Security Response to CVEs

Kubernetes Bill of Materials (KBOM) enables cloud security teams to understand the scope of third-party tooling in their environment to respond quicker to new vulnerabilities.
The post KBOM Enhances Cloud Security Response to CVEs appeared first on Lin…

How to Check if an RHEL System Is Vulnerable to a CVE

In this guide, learn how to check if an RHEL (or CentOS 6/7/8) system is vulnerable to a CVE. Also, learn how to mitigate these issues if you find your system is vulnerable.
The post How to Check if an RHEL System Is Vulnerable to a CVE appeared first …

UPGADE NOW: Apache OpenOffice Users Should Upgrade to Newest Security Release

The Apache Software Foundation (ASF) has released Apache OpenOffice 4.1.11, which fixes a handful of security vulnerabilities, including CVE-2021-33035, a recently revealed RCE vulnerability that could be triggered via a specially crafted document.
The…

CVE-2021-28372: Critical Bug Allows Remote Compromise, Control of Millions of IoT Devices

A vulnerability (CVE-2021-28372) in the SDK that allows IoT devices to use ThroughTek’s Kalay P2P cloud platform could be exploited to remotely compromise and control them, Mandiant researchers have discovered. Further attacks are possible depending on the functionality exposed by a device. Due to how the Kalay protocol is integrated by original equipment manufacturers (OEMs) […]

The post CVE-2021-28372: Critical Bug Allows Remote Compromise, Control of Millions of IoT Devices appeared first on Linux Today.