The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Remote code execution on feed enrichment. If "Extract full content from HTML5 and Google AMP" has been enabled for one or more feed subscriptions it is possibl…
The zero-day exploitation of a now-patched medium-severity security flaw in the FortinetFortiOSoperating system has been linked to a suspected Chinese hacking …
Google is calling attention to a set of severe security flaws in Samsung's Exynos chips, some of which could be exploited remotely to completely compromise a p…
It was discovered that there was a potential remote denial of service vulnerability in redis, a popular key-value database. Authenticated users could have used…
More than a dozen security flaws have been disclosed in E11, a smart intercom product made by Chinese company Akuvox."The vulnerabilities could allow attackers…
A change in the libreswan 4.2 Traffic Selector parsing code introduced a missing check that would reject palformed Traffic Selector payloads. As such, in such …
Upstream details at : https://access.redhat.com/errata/RHSA-2023:1091
Upstream details at : https://access.redhat.com/errata/RHSA-2023:1093
Upstream details at : https://access.redhat.com/errata/RHSA-2023:1095
Upstream details at : https://access.redhat.com/errata/RHSA-2023:1090
As threats grow and attack surfaces get more complex, companies continue to struggle with the multitude of tools they utilize to handle endpoint security and m…
A researcher highlighted a vulnerability in Snapchat that could allow a remote attacker to delete…Snapchat Vulnerability Could Allow Deleting Users’ Content Sp…
Upstream details at : https://access.redhat.com/errata/RHSA-2023:0675
Several issues were found in Kopano Collaboration Platform, a groupware solution, which could cause denial of service or unauthorized access. For Debian 10 bus…
The Trusted Platform Module (TPM) 2.0 specification is affected by two buffer overflow vulnerabilities that could allow attackers to access or overwrite sensit…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasreleaseda new advisory aboutRoyal ransomware, which emerged in the threat landscape last ye…
As a primary working interface, the browser plays a significant role in today's corporate environment. The browser is constantly used by employees to access we…
Upstream details at : https://access.redhat.com/errata/RHSA-2023:0978
It was discovered that syslog-ng, a system logging daemon, had integer overflow and buffer out-of-bounds issues, which could allow a remote attacker to cause D…
LastPass, which in December 2022 disclosed a severe data breach that allowed threat actors to access encrypted password vaults, said it happened as a result of…
A vulnerability have been found in libgit2, a cross-platform, linkable library implementation of Git, which may result in remote code execution when cloning a …
Upstream details at : https://access.redhat.com/errata/RHSA-2023:0812
Upstream details at : https://access.redhat.com/errata/RHSA-2023:0817
Popular cryptocurrency exchange platform Coinbase disclosed that it experienced a cybersecurity attack that targeted its employees.The companysaidits "cyber co…