Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

2 headlines in this view

Refine the feed

Search across headline titles and summaries.

Volume over time

Weekly headline count for the current query.

Showing 2 most recent headlines Filtered view

Cloud security company Wiz has revealed that it uncovered in-the-wild exploitation of a security flaw in a Linux utility called Pandoc as part of attacks designed to infiltrate Amazon Web Services (AWS) Instance Metadata Service (IMDS)

More from The Hacker News 24 Sep 2025, 7:15 p.m. CVE-2025-51591 Amazon Amazon Web Services CVE Cloud Credentials Exploit Flaw Identity and Access Management Linux Theft Vulnerability

Amazon Web Services (AWS) has fixed four security issues in its hot patch from December that addressed the critical Log4Shell vulnerability (CVE-2021-44228) affecting cloud or on-premise environments running Java applications with a vulnerable version of the Log4j logging library or containers. [...]

More from Bleeping Computer 20 Apr 2022, 8:45 p.m. Actively exploited CVE-2021-44228 Amazon Amazon Web Services CVE Cloud Critical Fixed Java Library Log4Shell Log4j Patch Vulnerability