The BSI warns of multiple Linux kernel vulnerabilities that enable DoS and privilege escalation and pose a significant threat in enterprise environments.
Vulnerabilities in the Bouncy Castle cryptographic library allow decryption of data and forgery of digital signatures; immediate patching is necessary.
BeyondTrust releases patches for four vulnerabilities in Remote Support and PRA, whose predecessor versions have already been exploited in active attack scenarios.
Atlassian Bamboo, Bitbucket, Confluence, Crucible, Fisheye and Jira are affected by multiple vulnerabilities enabling code execution and security bypasses.
29 of 281 free Android VPN apps examined leak user data unencrypted outside the VPN tunnel – a fundamental security failure affecting over 2.4 billion installations.