Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Sophos users must ensure that their firewall devices are updated with the latest updates, as…Sophos Firewall Vulnerabilities Could Allow Remote Attacks on Late…
Details have emerged about a now-patched security flaw in Styra's Open Policy Agent (OPA) that, if successfully exploited, could have led to leakage of New Tec…
A critical security flaw has been disclosed in the Kubernetes Image Builder that, if successfully exploited, could be abused to gain root access under certain …
A critical security flaw has been disclosed in the NVIDIA Container Toolkit that, if successfully exploited, could allow threat actors to break out of the conf…
A vulnerability has been found in ZNC which could result in remote code execution.
SolarWinds has issued patches to address a new security flaw in its Web Help Desk (WHD) software that could allow remote unauthenticated users to gain unauthor…
A vulnerability has been discovered in Ruby on Rails, which can lead to remote code execution via serialization of data.
A vulnerability has been discovered in Levenshtein, which could lead to a remote code execution.
A recently patched security flaw impacting VMware ESXi hypervisors has been actively exploited by "several" ransomware groups to gain elevated permissions and …
Response from ServiceNow: Based on our investigation to date, we have not observed evidence that…ServiceNow Remote Code Execution Vulnerabilities Under Attack …
WordPress admins must update their websites with the latest ProfileGrid plugin release. A severe privilege…ProfileGrid WordPress Plugin Vulnerability Could All…
Select versions of the OpenSSH secure networking suite are susceptible to a new vulnerability that can trigger remote code execution (RCE).The vulnerability, t…
A vulnerability has been discovered in OpenSSH, which can lead to remote code execution with root privileges.
Details have emerged about a new critical security flaw impacting PHP that could be exploited to achieve remote code execution under certain circumstances.The …
A maximum-severity security flaw has been disclosed in the TP-Link Archer C5400X gaming router that could lead to remote code execution on susceptible devices …
Multiple security vulnerabilities have been disclosed in LG webOS running on its smart televisions that could be exploited to bypass authorization and gain roo…
The malicious code inserted into the open-source library XZ Utils, a widely used package present in major Linux distributions, is also capable of facilitating …
A vulnerability has been discovered in Tox which may lead to remote code execution.
A series of severe security vulnerabilities have been discovered in the popular runC command line tool. These vulnerabilities, collectively known as Leaky Vess…
A vulnerability has been discovered in btrbk which can lead to remote code execution.
A vulnerability has been discovered in TACACS+ which could lead to remote code execution.
A vulnerability has been discovered in GNAT Ada Suite which can lead to remote code execution.
Security researchers have identified a malicious tool called "SYSTEMBC" that hackers have been actively exploiting. This tool acts as a SOCKS5 proxy , providin…
WordPress has released version 6.4.2 with a patch for a critical security flaw that could be exploited by threat actors by combining it with another bug to exe…
