Curl, the widely used open-source data transfer tool, has patched a vulnerability that has existed for 25 years. This update also addresses a total of 18 medium and low-severity vulnerabilities. The fixes are crucial for developers and organizations that rely on Curl for transferring data over various protocols, as these vulnerabilities could potentially be exploited if left unaddressed. Users of Curl should ensure they update to the latest version to protect their systems and data from possible attacks. Regular updates are essential in maintaining security, especially with tools that have been in use for such a long time.
Articles tagged "Update"
Found 419 articles
A newly discovered vulnerability in Samsung's KNOX security platform, identified as CVE-2026-20971, arises from a race condition in the kernel's process integrity validation. This flaw could potentially allow attackers to bypass security measures, putting devices at risk. Users of Samsung devices utilizing the KNOX platform should be particularly cautious, as the vulnerability might expose sensitive data or allow unauthorized access. Samsung has addressed this issue by releasing a patch, and it is crucial for users to apply this update promptly to secure their devices. Keeping software up to date is essential to avoid exploitation of such vulnerabilities.
Samsung has patched a serious vulnerability in its KNOX security software that affects millions of Galaxy devices. The flaw, identified as CVE-2026-20971, is a use-after-free vulnerability located in the kernel, specifically within the PROCA/FIVE component. This issue could allow attackers to exploit the software designed to protect devices, raising significant security concerns for users. Samsung released a fix for this flaw in January 2026, but the potential for exploitation underscores the need for users to update their devices promptly. The vulnerability puts millions of Galaxy users at risk, highlighting the importance of maintaining security updates for mobile devices.
GitHub is enhancing its software supply chain security by updating the 'actions/checkout' feature to prevent pwn request attacks. These attacks take advantage of the 'pull_request_target workflow' trigger, allowing malicious code to run with full privileges. The update, set to take effect on June 18, 2026, aims to protect users from potential exploitation by ensuring that workflows cannot execute harmful code from untrusted contributors. This change is significant for developers and organizations that rely on GitHub for their workflows, as it directly addresses vulnerabilities that could compromise their projects. By implementing this update, GitHub is taking proactive steps to secure the development process and maintain trust in its platform.
A supply chain attack has impacted multiple Pro plugins from ShapedPlugin, where attackers infiltrated the vendor's build and distribution pipeline. This breach allowed them to insert backdoor code into the plugins, which were then distributed through official update channels. As a result, users who installed or updated these plugins may have unknowingly compromised their WordPress sites. The incident raises significant concerns about the security of third-party plugins and the potential for widespread exploitation if the backdoors are leveraged by malicious actors. It's crucial for WordPress users to review their installed plugins and ensure they are using safe versions.
Actively Exploited
A vulnerability in certain versions of the Gravity SMTP plugin for WordPress has been exploited by attackers to extract sensitive information. This flaw allows the leakage of API keys, tokens, server details, and other confidential data. Websites using outdated or unpatched versions of the plugin are particularly at risk. This incident is concerning because it can lead to unauthorized access and further exploitation of affected sites. Users and website administrators are urged to update their plugins to protect against these data leaks and ensure the security of their WordPress installations.
Actively Exploited
A new ransomware strain called 'Prinz Eugen' has emerged, targeting recently modified files for encryption while notably avoiding the use of a ransom note on the infected systems. This approach may confuse victims, as they might not realize they've been attacked until it's too late. The ransomware's focus on recent files could affect businesses and individuals who regularly update their documents and data, making recovery more complicated. Users are urged to maintain regular backups and enhance their cybersecurity measures to protect against this evolving threat. The absence of a ransom note also raises questions about the attackers' intentions and future tactics.
Actively Exploited
Hackers are taking advantage of a recently patched vulnerability in the Gravity SMTP plugin for WordPress, which is used on around 100,000 websites. This security flaw, identified as CVE-2026-4020, allows attackers without authentication to access sensitive information, including API keys and OAuth tokens. The vulnerability has a medium severity score of 5.3, but the potential exposure of critical data makes it a significant concern for site administrators. Users of the Gravity SMTP plugin need to ensure they update to the latest version to protect their sites from these attacks. The urgency of addressing this issue is heightened by the fact that the vulnerability is currently being exploited in the wild.
Actively Exploited
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding a serious vulnerability in Splunk Enterprise that is currently being exploited by attackers. This flaw poses a significant risk to U.S. federal agencies and could potentially affect many organizations using this software. CISA has urged these agencies to take immediate action to secure their systems by applying the necessary patches by this Sunday. Failure to address this vulnerability could result in unauthorized access to sensitive data or system controls, making it crucial for organizations to prioritize this update. The urgency of the situation highlights the ongoing challenges in cybersecurity and the need for vigilance in maintaining software security.
Apple has released a security update to address a vulnerability in its Beats Studio Buds, identified as CVE-2025-20701. This flaw was uncovered by researchers Dennis Heinze and Frieder Steinmetz from ERNW GmbH. While the specific nature of the vulnerability has not been detailed, it poses a potential risk to users of the Beats Studio Buds, which are popular wireless earbuds. Users are encouraged to install the latest firmware update to ensure their devices are protected. Ignoring this update could leave users vulnerable to potential exploits that might compromise their audio experience or privacy.
Actively Exploited
A recent analysis has revealed that a majority of REDCap servers accessible via the internet are outdated and vulnerable. These servers, which are widely used in research and healthcare for data collection, are currently being targeted by a hacking group linked to China, known as UNC6508. Researchers found that these attackers use these vulnerabilities for initial access and to deploy backdoors, making it easier for them to exploit the systems further. The situation raises serious concerns for organizations relying on REDCap for sensitive data management, as outdated servers can lead to data breaches and compromise patient confidentiality. It's crucial for administrators to update their systems to defend against these ongoing attacks.
Actively Exploited
A supply chain attack has targeted multiple WordPress plugins from ShapedPlugin, leading to the distribution of compromised updates to paying customers through the vendor's official update mechanism. This breach allowed attackers to inject malicious code into the plugins, potentially affecting numerous WordPress sites that rely on these tools. Users of affected plugins may face serious security risks, including unauthorized access and data breaches. The situation is alarming as it underscores the vulnerability of software supply chains, where attackers can exploit trusted sources to distribute malware. Website owners using these plugins should take immediate precautions, including checking for updates and reviewing security practices to mitigate any potential damage.
Oracle has rolled out its June 2026 Critical Security Patch Update, addressing a total of 245 vulnerabilities across various products, including Communications, E-Business Suite (EBS), and Enterprise Manager. This update is crucial as it aims to protect users from potential exploitation of these vulnerabilities, which could lead to unauthorized access or data breaches. The large number of patches indicates a significant risk across multiple platforms, making it essential for organizations using these products to apply the updates promptly. By doing so, they can safeguard their systems against possible attacks that may target these weaknesses. Users are encouraged to review the specific patches applicable to their environments and implement them as soon as possible to enhance their security posture.
Actively Exploited
Researchers have uncovered a software supply chain attack affecting 144 npm packages linked to the Mastra namespace, which is used for building AI applications. The attack, identified by JFrog, SafeDep, Socket, and StepSecurity, involved the hijacking of a single npm account belonging to a user named 'ehindero', who then published malicious versions of these packages. This incident raises significant concerns for developers who rely on the Mastra framework, as it could lead to the introduction of vulnerabilities in their applications. Users of these compromised packages are urged to check their dependencies and update to secure versions to avoid potential risks. This event serves as a reminder of the importance of securing contributor accounts in open-source ecosystems.
Cybersecurity researchers have discovered new Windows versions of a backdoor known as SprySOCKS, which was previously thought to be limited to Linux systems. The variants, labeled WIN_DRV and WIN_PLUS, contain hard-coded command-and-control configurations and can communicate over TCP and UDP protocols. This development raises concerns as it indicates that attackers, likely linked to China, are expanding their malware capabilities to target Windows users. The existence of these variants could pose significant risks to organizations using Windows operating systems, as they may be vulnerable to unauthorized access and control. Users and companies should remain vigilant and update their security measures to prevent potential exploitation.