Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
With the recent discovery of a significant Chrome vulnerability tagged as CVE-2025-0762 , Google Chrome has again come under fire. This new threat, found in th…
Ransomware attacks have reached an unprecedented scale in the healthcare sector, exposing vulnerabilities that put millions at risk. Recently, UnitedHealth rev…
Several security vulnerabilities have been discovered in iperf3, an internet protocol bandwidth measuring tool, which may lead to a denial-of-service. When ipe…
Welcome to your weekly cybersecurity scoop! Ever thought about how the same AI meant to protect our hospitals could also compromise them? This week, we’re brea…
When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and siz…
A group of academics has disclosed details of over 100 security vulnerabilities impacting LTE and 5G implementations that could be exploited by an attacker to …
It was discovered that there was potential Denial of Service (DoS) vulnerability in Django, the Python-based web development framework. The lack of upper-bound…
Enterprise-grade Juniper Networks routers have become the target of a custom backdoor as part of a campaign dubbed J-magic.According to the Black Lotus Labs te…
Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …
Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …
CVE-2024-53263 When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the `git-credential(1)` command
It was discovered that there was a potential command-injection vulnerability was discovered in ucf, a tool to preserve user changes to config files.
As the backbone of much of the world's technological infrastructure, the open-source community prides itself on transparency, collaboration, and innovation . H…
Redis 7.2.7 Released Mon 6 Jan 2025 12:30:00 IDT Upgrade urgency SECURITY: See security fixes below. Security fixes (CVE-2024-46981) Lua script commands may le…
Several vulnerabilities were discovered in rsync, a fast, versatile, remote (and local) file-copying tool. CVE-2024-12084
New research has pulled back the curtain on a "deficiency" in Google's "Sign in with Google" authentication flow that exploits a quirk in domain ownership to g…
Threat hunters are calling attention to a new campaign that has targeted Fortinet FortiGate firewall devices with management interfaces exposed on the public i…
Threat hunters are calling attention to a new campaign that has targeted Fortinet FortiGate firewall devices with management interfaces exposed on the public i…
Authentication bypass in CEPH RadosGW. (CVE-2024-48916) References: - https://bugs.mageia.org/show_bug.cgi?id=33896 - https://ubuntu.com/security/notices/USN-7…
Linux is a powerful operating system that is greatly appreciated for being reliable, flexible, and open in nature. It runs servers, desktops, and even embedded…
As a Linux admin, you know that keeping your systems up-to-date is crucial for maintaining performance and security. The recently released KDE Plasma 6.2.5 off…
update to 8.0.2 fixes CVE-2024-46981 - Lua script commands may lead to remote code execution fixes CVE-2024-51741 - Denial-of-service due to malformed ACL sele…
India's Computer Emergency Response Team (CERT-In) recently issued a high-risk advisory warning about Google Chrome vulnerabilities in versions prior to 131.0.…
Cybersecurity researchers have uncovered firmware security vulnerabilities in the Illumina iSeq 100 DNA sequencing instrument that, if successfully exploited, …
