A newly published integer‑overflow vulnerability in the X Resize, Rotate and Reflect (RandR) extension — tracked as CVE‑2025‑49180 — affects multiple X.Org implementations (xorg‑server, xorg‑server‑Xwayland) and TigerVNC, and has prompted coordinated security updates from major Linux...
CISA and partner agencies have issued a fresh warning: pro‑Russia hacktivist collectives are carrying out opportunistic intrusions against U.S. and global critical infrastructure by exploiting internet‑facing Virtual Network Computing (VNC) connections, a low‑sophistication but high‑impact...
Siemens has published fixes for an improper VNC password check in multiple SINUMERIK CNC platforms after researchers discovered that the systems’ VNC access service can be reached with insufficient password verification, allowing an attacker on an adjacent network to gain unauthorized remote...