#securitypatch — Public Fediverse posts

Google skips Pixel 6 and Pixel 7 with its August security patch

Google released the monthly update for its Pixel phones on August 4. …
#NewsBeep #News #Mobile #Android #Android17 #Augustupdate #benchmarks #CA #Canada #CVE-2026-0163 #Google #GooglePixel #graphicscard #laptop #netbook #notebook #pixel6 #Pixel6Pro #Pixel6a #pixel7 #pixel7pro #pixel7a #Pixel8 #processor #reports #review #reviews #securitypatch #smartphone #softwaresupport #Technology #test #tests
https://www.newsbeep.com/ca/852925/

🕵️‍♂️🔒 Tails 7.9.1 a fost lansat! Actualizarea repară o vulnerabilitate critică de kernel și actualizează Tor Browser 🧅🛡️

Echipa din spatele Tails (The Amnesic Incognito Live System), faimoasa distribuție Linux axată pe anonimat absolut și confidențialitate, a lansat oficial o actualizare de securitate de urgență: versiunea 7.9.1. Acest release are un caracter critic și este conceput special pentru a proteja utilizatorii împotriva unei vulnerabilități recente descoperite la nivelul kernelului Linux.

Iată principalele modificări din Tails 7.9.1:

🔹 Repararea vulnerabilității de kernel „DirtyClone”:
Actualizarea principală de securitate din această versiune rezolvă o vulnerabilitate severă din kernelul Linux, cunoscută în comunitatea de securitate sub numele de DirtyClone (asociată cu manipularea apelurilor de sistem clone). Această breșă de securitate le-ar fi putut permite atacatorilor sau aplicațiilor malițioase să obțină privilegii de administrator (root) pe sistemul gazdă sau să spargă barierele de izolare ale proceselor (sandbox). Patch-ul inclus în versiunea 7.9.1 închide complet această portiță.

🔹 Actualizare pentru Tor Browser și Clientul Tor:
Fiind un sistem de operare unde tot traficul de internet este redirecționat implicit prin rețeaua Tor, componentele de navigare au fost aduse la zi pentru a asigura o protecție maximă:

Tor Browser a fost actualizat pentru a include cele mai noi patch-uri de securitate upstream de la Mozilla Firefox.

Clientul de fundal Tor a primit optimizări pentru o conexiune mai stabilă și circuite mai sigure, prevenind atacurile de tip „de-anonimizare” sau blocajele în regiunile cu cenzură agresivă.

🔹 Actualizări de componente și corecturi minore:
Pe lângă pachetele critice de securitate, Tails 7.9.1 aduce corecturi pentru utilitarul intern de configurare a stocării persistente (Persistent Storage) și actualizează diverse biblioteci de rețea din amontele Debian pentru a preveni crash-urile la pornire pe anumite configurații hardware mai noi.

Deoarece Tails este un sistem gândit să ruleze direct dintr-o memorie USB sau de pe un DVD fără a lăsa urme pe hard disk, dezvoltatorii recomandă ferm tuturor utilizatorilor să facă upgrade la versiunea 7.9.1 înainte de următoarea sesiune de navigare.

Dacă rulezi deja o versiune recentă de Tails, sistemul îți va propune o actualizare automată (automatic upgrade) la pornire, cu condiția să fii conectat la internet. În caz contrar, poți descărca noua imagine ISO/USB direct de pe site-ul oficial al proiectului.

#TailsOS #Tails791 #TorBrowser #Privacy #Anonymity #Cybersecurity #LinuxKernel #DirtyClone #SecurityPatch #TechNews

🔒🏴‍☠️ Transmission 4.1.3 a fost lansat! Actualizarea repară o vulnerabilitate critică la accesul de la distanță 🛡️🌐

Echipa din spatele popularului client BitTorrent open-source, Transmission, a lansat oficial versiunea 4.1.3. Aceasta este o actualizare de tip „bug-fix” de dimensiuni reduse, dar extrem de importantă, deoarece se concentrează pe rezolvarea unei probleme de securitate ce vizează utilizatorii care controlează aplicația de la distanță.

Iată principalele detalii despre Transmission 4.1.3:

🔹 Repararea unei vulnerabilități CSRF / CORS:
Principala corectură din această versiune rezolvă o problemă potențială de tip CSRF (Cross-Site Request Forgery) care îi afecta pe utilizatorii ce aveau activată opțiunea de acces de la distanță (Remote Access) prin intermediul interfeței web sau RPC. Mai exact, a fost eliminat un bug legat de politicile CORS (Cross-Origin Resource Sharing) care permitea scurgerea (leak) codului de securitate unic anti-CSRF (nonce). Fără acest patch, un atacator ar fi putut încerca să manipuleze de la distanță sesiunea Transmission a utilizatorului.

🔹 Alte corecturi tehnice:

A fost rezolvat un bug de tip use-after-free (o eroare de gestionare a memoriei RAM) localizat în codul care se ocupă de conexiunile de tip peer-to-peer.

S-a remediat o problemă de compilare ce apărea pe sistemele care utilizează biblioteca fmt 12.2.

A fost corectată o eroare de construcție (build error) legată de testele interne, care fusese introdusă din greșeală în versiunea anterioară, 4.1.2.

Transmission 4.1.3 este disponibil deja pentru descărcare pe pagina oficială de GitHub a proiectului, unde se găsesc atât codul sursă, cât și pachetele precompilate pentru diverse platforme. Pentru utilizatorii de distribuții Linux de tip rolling release (cum ar fi Arch Linux), noua versiune va sosi în mod automat în depozite în orele sau zilele următoare. Pentru alte distribuții, pachetul va deveni disponibil de îndată ce maintainerii locali îl vor include în managerul de pachete.

Recomandarea generală este ca toți utilizatorii care folosesc funcția de administrare web de la distanță să treacă la versiunea 4.1.3 cât mai curând posibil.

#Transmission #BitTorrent #Transmission413 #SecurityPatch #Cybersecurity #OpenSource #Linux #TechNews

Google accidentally exposed details of unfixed Chromium flaw

https://www.bleepingcomputer.com/news/security/google-accidentally-exposed-details-of-unfixed-chromium-flaw/

Read on HackerWorkspace: https://hackerworkspace.com/article/google-accidentally-exposed-details-of-unfixed-chromium-flaw

#vulnerability #exploit #securitypatch

SANS Stormcast Friday, May 15th, 2026: Website Fraud; Outlook Link Preview Bug; NGINX Vuln; Cisco 0-Day

https://isc.sans.edu/podcastdetail/9934

Read on HackerWorkspace: https://hackerworkspace.com/article/sans-stormcast-friday-may-15th-2026-website-fraud-outlook-link-preview-bug-nginx-vuln-cisco-0-day

#vulnerability #phishing #securitypatch

Christ flies off to heaven, what else to do than update your Linux servers?

It's cold as hell.... (strange expression) and the rain is pouring down. It's a 'stay inside' day today.

#securitypatch #linux #shitposting

SANS Stormcast Thursday, May 14th, 2026: Flexbile Windows Proxy; News from Nightmare Eclipse; A…

https://www.youtube.com/watch?v=-T1x8rCIblA

#vulnerability #exploit #securitypatch

🚨 Critical Composer Update: 2.9.8 & 2.2.28 fix a GitHub Actions token disclosure!

⚠️ Update NOW or disable GitHub Actions immediately!

https://blog.packagist.com/composer-2-9-8-and-2-2-28-fix-github-actions-token-disclosure-in-error-messages/

#PHP #Composer #ComposerPHP #OpenSource #WebDevelopment #GitHubActions #DevSecOps #CyberSecurity #SoftwareUpdate #PatchRelease #DependencyManagement #SecurityFix #Programming #Packagist #PHPDev #ComposerUpdate #OpenSourceSoftware #WebDevLife #InfoSec #SecurityPatch #CodeSmart #DependencyManagement #SoftwareSecurity #TechUpdate

SANS Stormcast Wednesday, May 13th, 2026: Microsoft Patch Tuesday; Large npm/pypi Compromise; R…

https://www.youtube.com/watch?v=aUficRwDQ6s

#malware #vulnerability #securitypatch

Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticator

https://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-rce-flaws-in-fortisandbox-and-fortiauthenticator/

Read on HackerWorkspace: https://hackerworkspace.com/article/fortinet-warns-of-critical-rce-flaws-in-fortisandbox-and-fortiauthenticator

#vulnerability #exploit #securitypatch

SAP fixes critical vulnerabilities in Commerce Cloud and S/4HANA

https://www.bleepingcomputer.com/news/security/sap-fixes-critical-vulnerabilities-in-commerce-cloud-and-s-4hana/

Read on HackerWorkspace: https://hackerworkspace.com/article/sap-fixes-critical-vulnerabilities-in-commerce-cloud-and-s-4hana

#vulnerability #exploit #securitypatch

cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

https://thehackernews.com/2026/05/cpanel-whm-patch-3-new-vulnerabilities.html

Read on HackerWorkspace: https://hackerworkspace.com/article/cpanel-whm-release-fixes-for-three-new-vulnerabilities-patch-now

#vulnerability #exploit #securitypatch

Update WhatsApp now: Two new flaws could expose you to malicious files

https://www.malwarebytes.com/blog/news/2026/05/update-whatsapp-now-two-new-flaws-could-expose-you-to-malicious-files

Read on HackerWorkspace: https://hackerworkspace.com/article/update-whatsapp-now-two-new-flaws-could-expose-you-to-malicious-files

#cybersecurity #vulnerability #securitypatch

SANS Stormcast Tuesday, May 5th, 2026: Honeypot Update; MOVEit Patches; Apache http2 Vuln; (#)

https://www.youtube.com/watch?v=CvUyjR3fPKk

#threatintelligence #vulnerability #securitypatch

Find and fix security vulnerabilities with Claude

https://www.youtube.com/watch?v=0SgCiUfoYo8

#aisecurity #vulnerability #securitypatch

SANS Stormcast Wednesday, April 29th, 2026: Odd Vercel Header Usage; GitHub Vuln Patches; MSFT RDP Notification Bug

https://isc.sans.edu/podcastdetail/9910

Read on HackerWorkspace: https://hackerworkspace.com/article/sans-stormcast-wednesday-april-29th-2026-odd-vercel-header-usage-github-vuln-patches-msft-rdp-notification-bug

#threatintelligence #vulnerability #securitypatch

Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover

https://thehackernews.com/2026/04/microsoft-patches-entra-id-role-flaw.html

Read on HackerWorkspace: https://hackerworkspace.com/article/microsoft-patches-entra-id-role-flaw-that-enabled-service-principal-takeover

#aisecurity #vulnerability #securitypatch

SANS Stormcast Friday April 24rd, 2026: Apple Update; Bitwarden Compromise; ASP.NET Core Patch (#)

https://www.youtube.com/watch?v=W3ju-VoIylA

#vulnerability #exploit #securitypatch

SANS Stormcast Tuesday, April 21st, 2026: CVE and EPSS; Windows Server 2025 OOB; QEMU Abuse; (#)

https://www.youtube.com/watch?v=whqSGs9IzNY

#ransomware #vulnerability #securitypatch

Critical 10.0 Spinnaker Vulns Allow RCE And Production Compromise - ZeroPath Blog

https://zeropath.com/blog/spinnaker-rce-production-compromise

Read on HackerWorkspace: https://hackerworkspace.com/article/critical-10-0-spinnaker-vulns-allow-rce-and-production-compromise-zeropath-blog

#vulnerability #exploit #securitypatch

Microsoft releases Windows 10 KB5082200 extended security update

https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-kb5082200-extended-security-update/

Read on HackerWorkspace: https://hackerworkspace.com/article/microsoft-releases-windows-10-kb5082200-extended-security-update

#cybersecurity #vulnerability #securitypatch

Microsoft releases Windows 10 KB5082200 extended security update

https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-kb5082200-extended-security-update/

Read on HackerWorkspace: https://hackerworkspace.com/article/microsoft-releases-windows-10-kb5082200-extended-security-update

#cybersecurity #vulnerability #securitypatch

Patch Tuesday, April 2026 Edition – Krebs on Security

https://krebsonsecurity.com/2026/04/patch-tuesday-april-2026-edition/

Read on HackerWorkspace: https://hackerworkspace.com/article/patch-tuesday-april-2026-edition-krebs-on-security

#cybersecurity #vulnerability #securitypatch

CVE-2026-0232 Cortex XDR Agent: Local Administrator can disable the agent on Windows

https://security.paloaltonetworks.com/CVE-2026-0232

Read on HackerWorkspace: https://hackerworkspace.com/article/cve-2026-0232-cortex-xdr-agent-local-administrator-can-disable-the-agent-on-windows

#cybersecurity #vulnerability #securitypatch

AuthZ plugin bypass with oversized request body

https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2

Read on HackerWorkspace: https://hackerworkspace.com/article/authz-plugin-bypass-with-oversized-request-body

#cybersecurity #vulnerability #securitypatch

Security Bulletins  |  Cloud Customer Care  |  Google Cloud Documentation

https://docs.cloud.google.com/support/bulletins/index#gcp-2026-015

Short summary: https://hackerworkspace.com/article/security-bulletins-cloud-customer-care-google-cloud-documentation-2

#vulnerability #exploit #securitypatch

Ajax football club hack exposed fan data, enabled ticket hijack

https://www.bleepingcomputer.com/news/security/ajax-football-club-hack-exposed-fan-data-enabled-ticket-hijack/

Short summary: https://hackerworkspace.com/article/ajax-football-club-hack-exposed-fan-data-enabled-ticket-hijack

#databreach #cybersecurity #securitypatch

CVE-2026-4428: Issues with AWS-LC - CRL Distribution Point Scope Check Logic Error

https://aws.amazon.com/security/security-bulletins/rss/2026-010-aws/

Short summary: https://hackerworkspace.com/article/cve-2026-4428-issues-with-aws-lc-crl-distribution-point-scope-check-logic-error

#cybersecurity #vulnerability #securitypatch

If you have a Galaxy A33, there's a crucial update you should install! 🔐📱

Samsung is releasing a new firmware for the Galaxy A33 5G, featuring the January 2026 security fix.

It's currently available for the Korean model SM-A336N as build A336NKSSDGZA1 and will soon reach other regions.

To see if it's ready in your area, go to Settings > Software update > Download and install.

#SamsungUpdate #GalaxyA33 #SecurityPatch #TechNews

https://winbuzzer.com/2026/01/19/pcs-refuse-to-shut-down-after-microsoft-patch-security-update-ironically-breaks-basic-functionality-xcxwbn/

PCs Refuse to Shut Down After Microsoft Patch: Security Update Ironically Breaks Basic Functionality

#Microsoft #Windows11 #SecurityPatch #WindowsUpdate #Windows11Enterprise #SecureLaunch #ITSecurity #SystemUpdate WindowsBug #MicrosoftPatch