Security Saturday — the vulnerabilities, advisories, and incidents from the past week worth knowing about.
Security
- Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions (The Hacker News)
Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code execution. The vulnerability has been described as a case of stored cross-site scr - Friday Squid Blogging: “Squidbleed” Vulnerability (Schneier on Security)
In a rare combined cybersecurity/squid post, a twenty-nine-year-old squid proxy bug can leak HTTP requests. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation po - URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat (The Hacker News)
Progress Software has told ShareFile customers to shut down the Windows servers running their Storage Zone Controllers, confirming to The Hacker News that it is responding to a "credible external security threat." The company has temporaril - AI Surveillance and Social Progress (Schneier on Security)
In the near future, AI -powered surveillance systems will be able to track everything we do in public, and much of what we do in private. And if we do something wrong—shoplift, litter, jaywalk, you name it—the system will notice, retain it, - Felons, Fraudsters Flog Offensive Cybersecurity Startup (KrebsOnSecurity)
A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent ventures included fake intellige
Enjoying these roundups?
Subscribe for daily follow-ups on AI news, trending open-source tools, and Security Saturdays.
Subscribe free →