Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The updated package fixes security vulnerabilities: A heap buffer overflow read was discovered in upx 4.0.0, because the check in p_lx_elf.cpp is not perfect. …
Updated squid packages fix security vulnerabilities: Due to improper input validation Squid is vulnerable to an HTTP Request Smuggling attack. This problem all…
Fixed format string vulnerability allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file (CVE-2021-30145). References:…
Exponential entity expansion attack bypasses all existing protection mechanisms. (CVE-2021-3541). References: - https://bugs.mageia.org/show_bug.cgi?id=29039 -…
Malicious actors are actively mass scanning the internet for vulnerable VMware vCenter servers that are unpatched against a critical remote code execution flaw…
Researchers have disclosed significant security weaknesses in popular antivirus software applications that could be abused to deactivate their protections and …
It is predicted that 3.5 million jobs will be unfilled in the field of cybersecurity by the end of this year. Several of these jobs pay very well, and in most …
Another report of cyber-attack has surfaced online from the health sector. The recent victim is…Swedish Public Health Agency Disclosed Multiple Hacking Attempt…
It was discovered that lasso, a library which implements SAML 2.0 and Liberty Alliance standards, did not properly verify that all assertions in a SAML respons…
Major software vulnerabilities are a fact of life, as illustrated by the fact that Microsoft has patched between 55 and 110 vulnerabilities each month this yea…
Thank you to Oyelakin Timilehin Valentina and Duane Dunston for contributing this article.Threat intelligence (or threat intell) is information used to underst…
This update upgrades Firefox to version 78.11.0 ESR. * Mozilla: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11 (CVE-2021-29967) For more details …
Web apps provide ease to both businesses and customers, allowing enterprises to save money and…How to practice web automation for cybersecurity software? on La…
This advisory resolves CVE issues filed against XP1 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP1 code ba…
Another report of ransomware attack has surfaced online, this time targeting JBS Foods. The firm…Food Processing Giant JBS Foods Shut Down After Ransomware Att…
Amazon's experiment wireless mesh networking has turned users into guinea pigs. If you use Alexa, Echo, or any other Amazon device, you have only 10 days to op…
Looking for a free and secure CentOS replacement? AlmaLinux and Oracle are great alternatives you'll want to look into. Among the various benefits that the dis…
Are you aware of how secure your domain is? In most organizations, there is an assumption that their domains are secure and within a few months, but the truth …
Another major service has recently fallen prey to a third-party cybersecurity incident. The latest report…Canada Post Disclosed Data Breach Due To Third-Party …
Amir Sarabadani and Kunal Mehta discovered that the import functionality of Hyperkitty, the web user interface to access Mailman 3 archives, did not restrict t…
**Version 4.4.24** (2021-05-19) * security **CVE-2021-21424** [SecurityCore] Fix user enumeration via response body on invalid credentials (chalasr) * bug #412…
Luis Merino, Markus Vervier and Eric Sesterhenn discovered an off-by-one in Nginx, a high-performance web and reverse proxy server, which could result in denia…
Another data breach has surfaced online targeting Indian citizens shortly after the Air India breach.…Dominos India Admits Data Breach After Hackers Upload Sto…
Updated ceph packages fix security vulnerability on rgw CVE-2021-3524 (as well as CVE-2021-3509 and CVE-2021-3531 from which Mageia was not affected). Referenc…
