Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
It was discovered that python-ecdsa, a cryptographic signature library for Python, did not correctly verify DER encoded signatures. Malformed signatures could …
This update upgrades Thunderbird to version 68.2.0. * Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2 (CVE-2019-11764) * Mozilla: Use-afte…
The notorious MageCart Gang once again made it to the news since attacking another e-commerce store. This time, it isMageCart Gang Recently Targeted P&G E-Stor…
If you're running any PHP based website on NGINX server and have PHP-FPM feature enabled for better performance, then beware of a newly disclosed vulnerability…
What's the price of unprotected IT infrastructure? Cybercrime Magazine says that global damages will surpass $6 billion as soon as 2021.Here we'll go through s…
This update upgrades Firefox to version 68.2.0 ESR. * Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2 (CVE-2019-11764) * Mozilla: Use-afte…
Privacy is a hot topic in the realm of smart speakers, from employees listening in on recordings and auditors accessing user locations. Now, another issue rega…
kernel: Use-after-free in __blk_drain_queue() function in block/blk-core.c (CVE-2018-20856) * kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function…
OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302) (CVE-2019-2949) * OpenJDK: Unexpected exception thrown during regular expression p…
JSS: OCSP policy "Leaf and Chain" implicitly trusts the root certificate (CVE-2019-14823) For more details about the security issue(s), including the impact, a…
No, it's not a patch Tuesday.It's the third Tuesday of the month, and as The Hacker News shared an early heads-up late last week on Twitter, Adobe today finall…
Do you know Apple is sending iOS web browsing related data of some of its users to Chinese Internet company Tencent?I am sure many of you are not aware of this…
In an effort to mitigate a large class of potential cross-site scripting issues in Firefox, Mozilla has blocked execution of all inline scripts and potentially…
More than 350 ethical hackers got together in cities across Australia on Friday for a hackathon in which they worked to cyber trace a missing face', in the fir…
It was discovered that multitouch devices were not being disabled by the "xtrlock" screen locking utility. xtrlock did not block multitouch events so an attack…
Today's CISOs operate in an overly intensive environment.As the ones who are tasked with the unenviable accountability for failed protection and successful bre…
After releasing a patch for a critical zero-day remote code execution vulnerability late last month, vBulletin has recently published a new security patch upda…
In lib/mini_magick/image.rb in ruby-mini-magick, a fetched remote image filename could cause remote command execution because Image.open input is directly pass…
It was discovered that jackson-databind, a Java library used to parse JSON and other data formats, did not properly validate user input before attempting deser…
Almost every application contains security vulnerabilities, some of which you may find today, but others would remain invisible until someone else finds and ex…
Another day, another revelation of a critical unpatched zero-day vulnerability, this time in the world's most widely used mobile operating system, Android.What…
Updated thunderbird packages fix security vulnerability: Spoofing a message author via a crafted S/MIME message (CVE-2019-11755) It also fixes various other …
patch: do_ed_script in pch.c does not block strings beginning with a ! character (CVE-2018-20969) * patch: OS shell command injection when processing crafted p…
You know about that one, much-hemmed-and-hawed-over, GDPR-ish, national, US privacy law? The one we dont have? The lack of which means the country's data priva…
