Browser Extensions Can Exploit ChatGPT, Gemini in ‘Man in the Prompt’ Attack

Man in the Prompt attack shows how browser extensions can exploit ChatGPT, Gemini and other AI tools to steal data or inject hidden prompts...

Security update 5.1.0 GM for Multi-Linux Manager Client Tools

This update fixes the following issues: spacecmd: Version update from 5.1.6-0 to 5.1.8-0 with the following key change: Update translation strings uyuni-tools: Version 5.1.14-0: Fix mgradm backup create handling of images and systemd files bsc1244563 migrate existing TLS certificates from 4.3...

Security update 5.1.0 GM for Multi-Linux Manager Client Tools

This update fixes the following issues: spacecmd: Version update from 5.1.6-0 to 5.1.8-0 with the following key change: Update translation strings uyuni-tools: Version 5.1.14-0: Fix mgradm backup create handling of images and systemd files bsc1244563 migrate existing TLS certificates from 4.3...

Security update 5.1.0 GM for Multi-Linux Manager Client Tools

This update fixes the following issues: spacecmd: Version update from 5.1.6-0 to 5.1.8-0 with the following key change: Update translation strings uyuni-tools: Version 5.1.14-0: Fix mgradm backup create handling of images and systemd files bsc1244563 migrate existing TLS certificates from 4.3...

SUSE-SU-2025:02555-1 Recommended update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues: - Rever...

CVE-2025-54388 vulnerabilities

Vulnerabilities for packages: trivy, goreleaser, buildkitd, grype, buildah, melange, cadvisor, buf, zarf, splunk-otel-collector, opentelemetry-collector-contrib, kargo, syft, nerdctl, osv-scanner, dagger, docker-compose, tw, k9s, opentelemetry-collector, aws-otel-collector, falcoctl, zot, apko,...

GHSA-X4RX-4GW3-53P4 vulnerabilities

Vulnerabilities for packages: trivy, goreleaser, buildkitd, grype, buildah, melange, cadvisor, buf, zarf, splunk-otel-collector, opentelemetry-collector-contrib, kargo, syft, nerdctl, osv-scanner, dagger, docker-compose, tw, k9s, opentelemetry-collector, aws-otel-collector, falcoctl, zot, apko,...

Chinese Firms Linked to Silk Typhoon Filed 15+ Patents for Cyber Espionage Tools

Chinese companies linked to the state-sponsored hacking group known as Silk Typhoon aka Hafnium have been identified as behind over a dozen technology patents, shedding light on the shadowy cyber contracting ecosystem and its offensive capabilities. The patents cover forensics and intrusion tools...

Wiz Uncovers Critical Access Bypass Flaw in AI-Powered Vibe Coding Platform Base44

Cybersecurity researchers have disclosed a now-patched critical security flaw in a popular vibe coding platform called Base44 that could allow unauthorized access to private applications built by its users. "The vulnerability we discovered was remarkably simple to exploit -- by providing only a...

RLSA-2025:10551 Important: container-tools:rhel8 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: podman: podman missing TLS verification CVE-2025-6032 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other relate...

container-tools:rhel8 security update

An update is available for slirp4netns, module.toolbox, module.netavark, toolbox, module.cockpit-podman, module.container-selinux, buildah, module.libslirp, module.skopeo, container-selinux, module.runc, module.crun, module.criu, runc, criu, module.buildah, containernetworking-plugins,...

RLSA-2025:3210 Important: container-tools:rhel8 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh CVE-2025-22869 For more details about the security issues, including the...

RLSA-2025:9142 Moderate: container-tools:rhel8 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 For more details about the security issues, including the impact, a CV...

RLSA-2025:9318 Important: javapackages-tools:201801 security update

The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fixes: apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default CVE-2019-10086 commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses ...

RLSA-2025:8478 Moderate: go-toolset:rhel8 security update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 For more details about the security issues, including the impact, a CVSS score...

container-tools:rhel8 security update

An update is available for slirp4netns, module.toolbox, module.netavark, toolbox, module.cockpit-podman, module.container-selinux, buildah, module.libslirp, module.skopeo, container-selinux, module.runc, module.crun, module.criu, runc, criu, module.buildah, containernetworking-plugins,...

javapackages-tools:201801 security update

An update is available for assertj-core, byaccj, maven-resolver, qdox, module.sonatype-plugins-parent, maven-shade-plugin, module.glassfish-jsp-api, module.exec-maven-plugin, plexus-sec-dispatcher, module.geronimo-annotation, module.atinject, module.xmlunit, glassfish-el, powermock,...

container-tools:rhel8 security update

An update is available for slirp4netns, module.toolbox, module.netavark, toolbox, module.cockpit-podman, module.container-selinux, buildah, module.libslirp, module.skopeo, container-selinux, module.runc, module.crun, module.criu, runc, criu, module.buildah, containernetworking-plugins,...

The vulnerability of the device management platform for heating, ventilation, and air conditioning systems, lighting, and energy consumption control within the Niagara Framework, along with the Niagara Enterprise Security tools for access control and security, can be exploited due to improper handling of argument separators in commands. This allows attackers to trigger service failures.

The vulnerability of the device management platform for heating, ventilation, and air conditioning systems, lighting, and energy consumption control within the Niagara Framework, along with the access control and security measures, is related to improper elimination of argument separators in the...

The vulnerability of the device management platform for systems involving heating, ventilation, and air conditioning, lighting, and energy consumption within the Niagara Framework, along with the Niagara Enterprise Security tools for access control and security, stems from incorrect assignment of permissions to critical resources. This allows attackers to gain unauthorized access to protected information, enhance their privileges, and execute arbitrary code.

The vulnerability of the device management platform for heating, ventilation, and air conditioning systems, lighting, and energy consumption control within the Niagara Framework, along with the access control and security measures, is related to the lack of proper protection for the...