The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
node-nth-check, a NodeJS module module used to parse and compile nth-checks, as they are found in CSS 3's nth-child() and nth-last-of-type(). This module was v…
Months after Microsoft patched a remote code execution vulnerability in SharePoint, a new way to…New Exploit Emerges For A Previously Patched SharePoint Vulner…
Citrix today released patches for multiple new security vulnerabilities affecting its Citrix Endpoint Management (CEM), also known as XenMobile, a product made…
A researcher has found a serious vulnerability in PowerPoint which can allow installing malware with mouse-over attacks. Ironically, despite beingPowerPoint Vu…
Continuing the trail of vulnerable antivirus tools, now joins Symantec. Researchers have found a serious vulnerability in Symantec Endpoint ProtectionCode Exec…
Cisco has recently released patches for numerous serious security vulnerabilities. The flaws existed in the Cisco Aironet Access Points Software,Multiple Secur…
Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-bui…
The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in att…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
Update the libcst/libcst_derive crates to 1.9.0. Update the salsa/salsa- macros/salsa-macro-rules crates to 0.28.5, fixing a use-after-free bug, GHSA- xc3w-55v…
SUSE released a low-rated security update for Micro 6.0 addressing three vulnerabilities, including null pointer dereferences and improper validation, with spe…
Oracle Linux 8 has released new haproxy updates addressing a NULL pointer dereference vulnerability (CVE-2026-55204) with specific RPM formats available for x8…
A security update for texlive addresses three vulnerabilities, including two NULL pointer dereferences and a use-after-free issue, affecting various SUSE produ…
Mageia reports two vulnerabilities in SQLite affecting versions 10 and 9, allowing denial of service and potential sensitive information disclosure due to NULL…
A security update for openssl-1_0_0 addresses a critical vulnerability in several SUSE Linux products, allowing users to fix a NULL pointer dereference issue t…
Mageia 10 has released an update to address security vulnerabilities in lrzip, specifically a use-after-free bug and null pointer dereference, identified as CV…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has urged government agencies to apply patches for two security flaws impacting Synacor Zimbra…
Several issues have been found in rlottie, a library for rendering vector based animations and art. Most of these CVEs have been already fixed by Fix-crash-on-…
It was discovered that there was a potential null pointer dereference vulnerability in libetpan, an low-level library for handling email.
Microsoft has revealed that one of the threat actors behind the active exploitation of SharePoint flaws is deploying Warlock ransomware on targeted systems.The…
The threat actors behind the DragonForce ransomware gained access to an unnamed Managed Service Provider's (MSP) SimpleHelp remote monitoring and management (R…
A critical security vulnerability has been disclosed in SailPoint's IdentityIQ identity and access management (IAM) software that allows unauthorized access to…
Ivanti has released software updates to address multiple security flaws impacting Endpoint Manager (EPM), including 10 critical vulnerabilities that could resu…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting Microsoft Sharepoint Server to its Known Exploited Vulnera…