Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Fortra has released details of a now-patched critical security flaw impacting its FileCatalyst file transfer solution that could allow unauthenticated attacker…
It was discovered that composer, a dependency manager for the PHP language, processed files in the local working directory. This could lead to local privilege …
According to a recent post from Sucuri, their website scanner detected an active distributed brute-force…WordPress Sites Exploited To Brute-Force Passwords Via…
It was discovered that there were a number of issues in Django, a popular Python-based web development framework: * CVE-2021-28658: Prevent a directory travers…
As an IT leader, staying on top of the latest cybersecurity developments is essential to keeping your organization safe. But with threats coming from all aroun…
A critical security flaw has been disclosed in a popular WordPress plugin called Ultimate Member that has more than 200,000 active installations.The vulnerabil…
The updated packages fix a security vulnerability: pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. (CVE-2024-22365) References:
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned that more than 2,000 computers in the country have been infected by a strain of malware ca…
Updated zlib packages fix a security vulnerability: Directory traversal vulnerability in the do_extract_currentfile function in miniunz.c in miniunzip in miniz…
Linuxia, a popular open-source operating system , has gained popularity recently due to its robustness, flexibility, and security. These benefits have made it …
Linuxia, a popular open-source operating system , has gained popularity recently due to its robustness, flexibility, and security. These benefits have made it …
Mexican financial institutions are under the radar of a new spear-phishing campaign that delivers a modified version of an open-source remote access trojan cal…
Security researchers have identified a malicious tool called "SYSTEMBC" that hackers have been actively exploiting. This tool acts as a SOCKS5 proxy , providin…
Microsoft has addressed a total of 48 security flaws spanning its software as part of its Patch Tuesday updates for January 2024.Of the 48 bugs, two are rated …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added six security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evid…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added six security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evid…
Information stealing malware are actively taking advantage of an undocumented Google OAuth endpoint named MultiLogin to hijack user sessions and allow continuo…
Researchers have found numerous malware groups actively exploiting a Google Cookie vulnerability for session hijacking.…Multiple Malware Exploit Google Cookie …
The threat actor referred to as Cloud Atlas has been linked to a set of spear-phishing attacks on Russian enterprises.Targets included a Russian agro-industria…
The developers of the information stealer malware known as Rhadamanthys are actively iterating on its features, broadening its information-gathering capabiliti…
MongoDB on Saturday disclosed it's actively investigating a security incident that has led to unauthorized access to "certain" corporate systems, resulting in …
Cybersecurity researchers have discovered 18 malicious loan apps for Android on the Google Play Store that have been collectively downloaded over 12 million ti…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned of active exploitation of a high-severity Adobe ColdFusion vulnerability by unidentifie…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) revealed that it's responding to a cyber attack that involved the active exploitation of Unitr…
