Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Red Hat OpenShift Service Mesh 1.0.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring S…
Almost every application contains security vulnerabilities, some of which you may find today, but others would remain invisible until someone else finds and ex…
The infamous eGobbler hacking group that surfaced online earlier this year with massive malvertising campaigns has now been caught running a new campaign explo…
We already have witnessed the innovativeness of criminal hackers in exploiting various services to bait users. From regular email phishingScammers Exploit Goog…
Google has released an urgent software update for its Chrome web browser and is urging Windows, Mac, and Linux users to upgrade the application to the latest a…
Multiple security issues were discovered in PostgreSQL, which may result in execution of arbitrary code, incorrect authentication, information disclosure, deni…
Two security flaws in NVIDIA Linux drivers could allow someone with limited access to a server to gain full control of it. NVIDIA has already released fixes fo…
Be very careful of this newly discovered vulnerability in the Apache web server. Specifically, the vulnerability could allow attackers to execute code of their…
Check Point Software has released emergency hotfixes to address a high-severity flaw that hackers have been exploiting to gain root privileges and establish pe…
A critical vulnerability in the HTTP/2 module of Apache HTTP Server could be exploited by an unauthenticated attacker to obtain remote code execution (RCE).…
Security researcher Abdelhamid Naceri (also known as Nightmare Eclipse) has released a new Windows zero-day exploit that can let attackers gain SYSTEM privileg…
ConnectWise has taken the precautionary step of disabling five third-party extensions in partner environments following reports of unauthorized access. In an a…
An update that solves 1356 vulnerabilities, contains four features and has 27 fixes can now be installed.
New git packages are available for Slackware 15.0 and -current to fix security issues.
An update that solves 1356 vulnerabilities, contains four features and has 27 fixes can now be installed.
Multiple vulnerabilities were discovered in OpenEXR, a library for handling high dynamic range images. Processing malformed image files could cause denial of s…
N-able said it has taken N-central Hosted Environments offline and is urging on-premises customers to shut down their servers until further notice following th…
New krb5 packages are available for Slackware 15.0 and -current to fix security issues.
An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security …
Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to r…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vul…
Several vulnerabilities were discovered in rsync, a fast, versatile, remote (and local) file-copying tool, which could result in local privilege escalation, by…
Scammers are impersonating major brands and celebrities to lure consumers into fake gift card giveaways that collect personal information and trigger unwanted …
An update that solves 29 vulnerabilities and contains one feature can now be installed.
