Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The Tails project has announced the release of Tails 5.1. It comes with improvements to the Tor Connection assistant, the Unsafe Browser and captive portals, a…
A patch update (from 7.10.2 to 7.10.2.P1) is now available for Red Hat on OpenShift for EAP, Karaf, and Spring Boot. The purpose of this text-only errata is to…
Researchers discovered a security issue affecting Microsoft Office that could allow remote code execution attacks.…A Severe Zero-Day Vulnerability Riddles Micr…
An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The clie…
Update to 2.36.3: * Support capturing already encoded video streams, which takes advantage of encoding done in hardware by devices which support this feature. …
A malicious website could have learned the size of a cross-origin resource that supported Range requests (CVE-2022-31736). A malicious webpage could have cause…
Being able to improve your career in cyber security is something that can be hugely fulfilling, and there are a lot of great ideas you can use that will help y…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
Researchers have spotted a new browser hijacker in the wild, identified as “ChromeLoader” malware. This…ChromeLoader – A New Browser Hijacking Malware Spreadin…
rsyslog: Heap-based overflow in TCP syslog server (CVE-2022-24903) For more details about the security issue(s), including the impact, a CVSS score, acknowledg…
Researchers from Google found five different zero-day bugs that the notorious Predator spyware exploited to…Predator Spyware Exploited 5 Android Zero-Day Bugs …
Peter Agten discovered that several modules for TCP syslog reception in rsyslog, a system and kernel logging daemon, have buffer overflow flaws when octet-coun…
This kernel-linus update is based on upstream 5.15.43 and fixes at least the following security issues: A race condition in the perf subsystem allows for a loc…
This kernel update is based on upstream 5.15.43 and fixes at least the following security issues: A race condition in the perf subsystem allows for a local pri…
Ethical hacking might sound contradictory, but leveraging the skills of the ''white hat' hacker community has done a great deal for safety and security on the …
Ethical hacking might sound contradictory, but leveraging the skills of the ''white hat' hacker community has done a great deal for safety and security on the …
New upstream release for v2.14.0. See release notes at [NEWS](https://github.com/coreos/ignition/blob/main/NEWS).
New upstream release for v2.14.0. See release notes at [NEWS](https://github.com/coreos/ignition/blob/main/NEWS).
New upstream release for v2.14.0. See release notes at [NEWS](https://github.com/coreos/ignition/blob/main/NEWS).
Multiple vulnerabilities have been discovered in the lrzip compression program which could result in denial of service or potentially the execution of arbitrar…
Nokogiri did not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors (s…
This update provides ffmpeg version 4.3.4, which fixes several security vulnerabilities and other bugs which were corrected upstream. References: - https://bug…
A bug was found in runc where runc exec --cap executed processes with non-empty inheritable Linux process capabilities, creating an atypical Linux environment …
What is msImpersonate? What’s up nerds! Captain AMayorica hooked us up again with another Microsoft…Impersonate Local Microsoft Users with msImpersonate on Lat…
