Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Zhang Boyang reported that the grub2 update released as DLA 3190-1 did not correctly apply fixes for CVE-2022-2601 and CVE-2022-3775. Updated packages are now …
A new attack method can be used to circumvent web application firewalls (WAFs) of various vendors and infiltrate systems, potentially enabling attackers to gai…
updates to screenshooter,settings, and places-plugin
grub2: Integer underflow in grub_net_recv_ip4_packets (CVE-2022-28733) For more details about the security issue(s), including the impact, a CVSS score, acknow…
The newest upstream commit Security fix for CVE-2022-4141 Vim did not recognize key codes passed by Kitty
Cryptocurrency investment companies are the target of a developing threat cluster that uses Telegram groups to seek out potential victims.Microsoft's Security …
Cryptocurrency investment companies are the target of a developing threat cluster that uses Telegram groups to seek out potential victims.Microsoft's Security …
The newest upstream commit Security fix for CVE-2022-4141 Vim did not recognize key codes passed by Kitty
Update to 102.5.1 ; https://www.mozilla.org/en- US/security/advisories/mfsa2022-50/ ; https://www.thunderbird.net/en- US/thunderbird/102.5.1/releasenotes/
pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414) For more details about the security issue(s), including the impact, a CV…
Cybersecurity researchers have shed light on a darknet marketplace calledInTheBoxthat's designed to specifically cater to mobile malware operators.The actor be…
Ransomware attacks keep increasing in volume and impact largely due to organizations' weak security controls. Mid-market companies are targeted as they possess…
There was a potential HTTP request smuggling vulnerability in http-parser, a popular library for parsing HTTP messages. For Debian 10 buster, this problem has …
A new data wiper malware calledCryWiperhas been found targeting Russian government agencies, including mayor's offices and courts."Although it disguises itself…
Telemetry data is vital for understanding how an IT environment is performing. By gathering this data and monitoring it closely, administrators can identify is…
In the era of digitization and ever-changing business needs, the production environment has become a living organism. Multiple functions and teams within an or…
The Lazarus Group threat actor has been observed leveraging fake cryptocurrency apps as a lure to deliver a previously undocumented version of the AppleJeus ma…
ranjit-git discovered an information leak vulnerability in node-fetch, a Node.js module exposing a window.fetch compatible API on Node.js runtime: the module w…
Jhead, a tool for manipulating EXIF data embedded in JPEG images, allowed attackers to execute arbitrary OS commands by placing them in a JPEG filename and the…
Jhead, a tool for manipulating EXIF data embedded in JPEG images, allowed attackers to execute arbitrary OS commands by placing them in a JPEG filename and the…
Update to 102.5.1 ; https://www.mozilla.org/en- US/security/advisories/mfsa2022-50/ ; https://www.thunderbird.net/en- US/thunderbird/102.5.1/releasenotes/
NVIDIA has released a security update for its GPU display driver, containing a fix for a high-severity flaw that threat actors can exploit to perform, among ot…
IBM has fixed a high-severity security vulnerability affecting its Cloud Databases (ICD) for PostgreSQL product that could be potentially exploited to tamper w…
A previously undocumented Go-based malware is targeting Redis servers with the goal of taking control of the infected systems and likely building a botnet netw…
