AsyncRAT Exploits ConnectWise ScreenConnect to Steal Credentials and Crypto

Cybersecurity researchers have disclosed details of a new campaign that leverages ConnectWise ScreenConnect, a legitimate Remote Monitoring and Management RMM software, to deliver a fleshless loader that drops a remote access trojan RAT called AsyncRAT to steal sensitive data from compromised...

[SECURITY] Fedora 41 Update: rust-crypto-auditing-client-0.2.3-2.fc41

Event broker client for crypto-auditing project...

[SECURITY] Fedora 41 Update: rust-crypto-auditing-event-broker-0.2.3-3.fc41

Event broker for crypto-auditing project...

[SECURITY] Fedora 41 Update: rust-crypto-auditing-agent-0.2.3-3.fc41

Event collector agent for crypto-auditing project...

[SECURITY] Fedora 42 Update: rust-crypto-auditing-client-0.2.3-4.fc42

Event broker client for crypto-auditing project...

[SECURITY] Fedora 42 Update: rust-crypto-auditing-event-broker-0.2.3-5.fc42

Event broker for crypto-auditing project...

[SECURITY] Fedora 42 Update: rust-crypto-auditing-agent-0.2.3-5.fc42

Event collector agent for crypto-auditing project...

Fedora 42 : rust-crypto-auditing-agent / rust-crypto-auditing-client / etc (2025-eb42f0a2fb)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-eb42f0a2fb advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 41 : rust-crypto-auditing-agent / rust-crypto-auditing-client / etc (2025-b1dd6d1575)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-b1dd6d1575 advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security advisory...

PT-2025-37235

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue related to control flow integrity CFI. A type punning issue within the acomp component could lead to a crash when CFI is enabled. The resolution...

RHEL 9 : kernel (RHSA-2025:15670)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:15670 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ext4: use-after-free in...

Fedora: Security Advisory (FEDORA-2025-b1dd6d1575)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-eb42f0a2fb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kernel: crypto: algif_hash - fix double free in hash_accept

In the Linux kernel, the following vulnerability has been resolved: crypto: algifhash - fix double free in hashaccept If accept2 is called on socket type algifhash with MSGMORE flag set and cryptoahashimport fails, sk2 is freed. However, it is also freed in afalgrelease, leading to...

EulerOS 2.0 SP12 : grub2 (EulerOS-SA-2025-2009)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks.CVE-2024-56738...

EulerOS 2.0 SP12 : grub2 (EulerOS-SA-2025-2040)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks.CVE-2024-56738...

RHEL 9 : kernel-rt (RHSA-2025:15658)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:15658 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

kernel security update

5.14.0-570.41.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

Linux Distros Unpatched Vulnerability : CVE-2025-39729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix dereferencing uninitialized error pointer Fix below smatch warnings:...

Linux Distros Unpatched Vulnerability : CVE-2017-0520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the...