Tag: cybersecurity
-
‘Free Type’ Library exploits Linux
Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk. Meta has warned that a security vulnerability impacting the FreeType open-source font rendering library may have been exploited in the wild. The vulnerability has been assigned the CVE identifier CVE-2025-27363, and carries a CVSS score of 8.1, indicating high severity. Described as an out-of-bounds write…
-
Linux kernel flaw added to CISA’s list
The Cybersecurity and Infrastructure Security Agency (CISA) on Feb. 5 added a high-severity Linux kernel vulnerability to its Known Exploited Vulnerabilities (KEV) list, ordering federal agencies to apply a patch within three weeks. CISA’s order follows Google issuing a patch for the bug — CVE-2024-53104 — mainly because the flaw could let attackers escalate privileges…
-
Facebook Lifts Linux Ban
Facebook admits that the Linux topic crackdown was ‘in error’ and has been fixed. ‘Discussions of Linux are allowed on our services,’ insists the social media giant. Facebook’s heavy-handed censorship of Linux groups and topics was “in error,” the social media juggernaut has admitted. Responding to reports earlier this week, sparked by the curious censorship…
-
Win10 Users Urged To Upgrade
Cybersecurity firm ESET is urging Windows 10 users to upgrade to LINUX or Windows 11 to avoid a “security fiasco” as the 10-year-old operating system nears the end of support in October 2025. “It’s five minutes to twelve to avoid a security fiasco for 2025,” explains ESET security expert Thorsten Urbanski. “We strongly advise all…
-
UEFI ‘Bootkit’ hits bootloader
Researchers at security firm ESET said Wednesday that they found the first UEFI bootkit for Linux. The discovery may portend that UEFI bootkits that have targeted Windows systems in recent years may soon target Linux too. Bootkitty—the name unknown threat actors gave to their Linux bootkit—was uploaded to VirusTotal earlier this month. Compared to many…
-
Chinese Spyware targets Android
Researchers uncover Chinese spyware used to target Android devices Security researchers have uncovered a new surveillance tool that they say has been used by Chinese law enforcement to collect sensitive information from Android devices in China. The tool, named “EagleMsgSpy,” was discovered by researchers at U.S. cybersecurity firm Lookout. The company said at the Black…
