The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A vulnerability was found in dnsmsq through version 2.90, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via v…
Potential remote code execution during URN processing (CVE-2019-12526). Multiple improper validations in URI processing (CVE-2019-12523, CVE-2019-18676).
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4152
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4108
With its latest and last Patch Tuesday for 2019, Microsoft is warning billions of its users of a new Windows zero-day vulnerability that attackers are actively…
The 2020 Cybersecurity Salary Survey was an online survey published in The Hacker News and created to provide insight into the details related to cybersecurity…
More deserialization flaws were discovered in jackson-databind which could allow an unauthenticated user to perform remote code execution. The issue was resolv…
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4024
A team of cybersecurity researchers has disclosed a new severe vulnerability affecting most Linux and Unix-like operating systems, including FreeBSD, OpenBSD, …
A team of cybersecurity researchers has disclosed a new severe vulnerability affecting most Linux and Unix-like operating systems, including FreeBSD, OpenBSD, …
Updated libvpx packages fix security vulnerabilities: It was discovered that libvpx did not properly handle certain malformed WebM media files. If an applicat…
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3979
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3976
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3888
This time last year, the Australian Labor Party waved through the government's encryption Bills, formally known as theÂAssistance and Access Bill, and threw ou…
Tim DàŒsterhus discovered that haproxy, a TCP/HTTP reverse proxy, did not properly sanitize HTTP headers when converting from HTTP/2 to HTTP/1. This would allo…
IBM has spoken out against Australia's controversial 'anti-encryption' laws, claiming they undermine previous work to strengthen the country's defenses.ÂThe ve…
Updated mariadb packages fix security vulnerabilities: A vulnerability in Server: Optimizer contains an easily exploitable vulnerability allows low privileged…
This kernel-linus update is based on the upstream 5.3.13 and fixes atleast the following security issues: Insufficient access control in a subsystem for Intel…
This kernel update is based on the upstream 5.3.13 and fixes atleast the following security issues: Insufficient access control in a subsystem for Intel (R) …
The updated packages fix a security vulnerability: In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote e…
Updated systemd packages fix security vulnerability: Nadav Markus from Palo Alto Networks discovered that systemd-resolved does not enforce appropriate access…
It was discovered that there were multiple double free vulnerabilities in python-psutil, a Python module providing convenience functions for accessing system p…
As the world becomes more interconnected by the day, more and more companies of all sizes and industries are finding themselves under attack by fearless cyberc…