Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Unless your computer is pretty old, it probably uses UEFI (Unified Extensible Firmware Interface) to boot. The idea is that a bootloader picks up files from an…
Threat actors have been leveraging polyglot and malicious Java archive files to distribute the StrRAT and Ratty remote access trojans to evade detection by sec…
With the next Linux kernel cycle we could see upstream disable their driver support for Microsoft's Remote Network Driver Interface Specification (RNDIS) proto…
DevOps platform CircleCI on Wednesday urged its customers to rotate all their secrets following an unspecified security incident.The company said an investigat…
Threat actors affiliated with a ransomware strain known as Play are leveraging a never-before-seen exploit chain that bypasses blocking rules for ProxyNotShell…
Microsoft has revised the severity of a security vulnerability it originallypatched in September 2022, upgrading it to "Critical" after it emerged that it coul…
Phishing campaigns involving theQakbot malwareare using Scalable Vector Graphics (SVG) images embedded in HTML email attachments.The new distribution method wa…
Microsoft launched a preview of new server protection capabilities in its Defender for Business solution back in July. The company announced this week that thi…
Cybersecurity researchers have reported an increase inTrueBotinfections, primarily targeting Mexico, Brazil, Pakistan, and the U.S.Cisco Talos said the attacke…
The maintainers of the FreeBSD operating system have released updates to remediate a security vulnerability impacting the ping module that could be potentially…
Researchers have disclosed details of three new security vulnerabilities affecting operational technology (OT) products from CODESYS and Festo that could lead …
The Android banking fraud malware known as SharkBot has reared its head once again on the official Google Play Store, posing as file managers to bypass the app…
Companies based in the U.S. have been at the receiving end of an "aggressive" Qakbot malware campaign that leads to Black Basta ransomware infections on compro…
Future Intel CPUs and some existing processors via a microcode update will support a new feature called the Asynchronous EXit (AEX) notification mechanism to h…
The tech provider ConnectWise disclosed a severe remote code execution flaw that exposed thousands of…ConnectWise Addressed Remote Code Execution Flaw Risking …
Recently, a remote code execution flaw in the Apache Common Text library stirred up the…Apache Commons Text Library Flaw Is Worrisome, But Not Like Log4Shell o…
Updated security tools, IoT performance improvements, and its own Docker repo are some things the new Parrot OS 5.1 comes with.
The ever-changing landscape of technology is a fascinating sight to see, but not all the…Be Aware! 6 Steps to Protect Against Ransomware on Latest Hacking News…
Researchers observed the re-emergence of the SharkBot trojan targeting Android users. Specifically, they discovered a…New SharkBot Malware Variant Appears on P…
Just a couple of weeks after a previous zero-day, Google has rolled out another emergency…Google Fix Another Chrome Zero-Day With An Emergency Update on Latest…
Heads up, Chrome users! Google has rolled out another major Chrome browser update fixing a…Google Address Another Zero-Day Vulnerability In Chrome Browser on L…
A vulnerability in Motion allows a remote attacker to cause denial of service.
GNOME is planning to protect insecure hardware by notifying users more about their firmware security status.
OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169) * OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540) * OpenJDK:…
