Source: Help Net Security

2 stories in the last 30d

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Tools 57 Industry 51 AI safety & security 20 Exploit / PoC 19 Phishing & fraud 15 Data breach 14 Research 14 AI tools & infra 11 AI industry 11 Threat actor 10 Malware 9 Vulnerability 9 Advisory 8 Policy & legal 6

SeverityAll critical 10 high 41 medium 39 low 2 info 174 source: Help Net Security ✕

Ubuntu 24.04.5 LTS release patches security bugs across ten flavors

Canonical ships Ubuntu 24.04.5 LTS point release bundling security fixes into fresh install media for desktop, server and nine other flavors.

Canonical released Ubuntu 24.04.5 LTS, a point release for the Noble Numbat series that folds accumulated security corrections and high-severity bug fixes into new installation media. Nine flavors including Kubuntu, Xubuntu, Ubuntu MATE, Ubuntu Studio and Edubuntu also moved to 24.04.5. Existing 22.04 LTS users receive the fixes through the automatic upgrade path at no cost. The release notes name no CVEs or bug IDs, and support timelines still count from the original 24.04 launch date (five years for Desktop/Server/Cloud/Core, three for flavors, extendable with Expanded Security Maintenance).

Help Net Securityupdated Sep 11, 12:03 UTC · 4d agofirst Sep 11, 04:07 UTC · 4d agoAdvisory 13 sources

Jellyfin 12.0 security fixes arrive alongside the removal of legacy client logins

Jellyfin 12.0 ships security fixes for path traversal, first-run setup bypass, unsafe plugin names, and web client XSS, plus removal of legacy login paths.

Jellyfin 12.0 blocks requests built to reach files outside served folders, prevents setup-wizard re-runs on misconfigured servers, rejects unsafe plugin package names, and fixes web client cross-site scripting. The project published no CVE identifiers or severity ratings for the fixes. The release also drops legacy /emby/ and /mediabrowser/ endpoints, targets .NET 10, and breaks 10.11-era third-party plugins.

Help Net SecuritySep 8, 08:41 UTC · 7d agoVulnerability