Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Cyku Hong from DEVCORE discovered that php-nette, a PHP MVC framework, is vulnerable to a code injection attack by passing specially formed parameters to URL t…
Updated ruby-em-http-request packages fix security vulnerability: A flaw was found in rubygem-em-http-request. The eventmachine library does not verify the hos…
A 22-year-old man from the U.S. state of Kansas has been indicted on charges that he unauthorizedly accessed a public water facility's computer system, jeopard…
Update to upstream 20210315 release ---- Update to upstream 20210208 release: * rtl_bt: Updates for RTL8822C, RTL8821C, added RTL8852A * Link Cypress brcmfmac …
While mitigations are in place to protect Linux systems from Spectre attacks, newly discovered vulnerabilities…Two Linux Vulnerabilities Could Allow Bypassing …
While ransomware attacks are becoming common, still not every victim firm knows how to deal…FatFace Disclosed Data Breach; Turns Out It Suffered Ransomware Att…
flatpak: "file forwarding" feature can be used to gain unprivileged access to files (CVE-2021-21381) For more details about the security issue(s), including th…
Kevin Chung discovered that lxml, a Python binding for the libxml2 and libxslt libraries, did not properly sanitize its input. This would allow a malicious use…
Cybersecurity researchers on Monday disclosed two new vulnerabilities in Linux-based operating systems that, if successfully exploited, could let attackers cir…
In our increasingly digital society, protecting the privacy of sensitive data and our behavior online is a universal concern. Many users switch to Linux for it…
The maintainers of OpenSSL have released a fix for two high-severity security flaws in its software that could be exploited to carry out denial-of-service (DoS…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
Popular audio chat app Clubhouse has now made it to the news for a not-so-good…BlackRock Malware Reappears On Play Store Posing As Clubhouse App on Latest Hack…
The U.S. Department of Justice yesterday announced updates on two separate cases involving cyberattacks'a Swiss hacktivist and a Russian hacker who planned to …
This kernel update is based on upstream 5.10.25 and fixes atleast the following security issues: Unprivileged BPF programs running on affected systems can bypa…
Continuing with their invasive strategies, the e-commerce predator Magecart has developed another malicious feature. As…Magecart Skimmer Attacks Sites Whilst H…
The Apache Software Foundation on Friday addressed a high severity vulnerability in Apache OFBiz that could have allowed an unauthenticated adversary to remote…
While steganography is nothing new, a researcher has taken this technique to the next level.…Researcher Demonstrates Hiding Data In Twitter Images on Latest Ha…
A new research has yielded yet another means to pilfer sensitive data by exploiting what's the first "on-chip, cross-core" side-channel attack targeting the ri…
Google has just released a second patch for another zero-day affecting its Chrome browser. While…Google Patched Second Chrome Zero-Day Within A Month on Latest…
On case-insensitive file systems with support for symbolic links, if Git is configured globally to apply delay-capable clean/smudge filters (such as Git LFS), …
initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description (CVE-2019-13990…
Researchers have discovered a new side-channel that they say can be reliably exploited to leak information from web browsers that could then be leveraged to tr…
Cybersecurity is a hot-button issue right now and for good reason. 2020 was full of…The Cybersecurity Trends Affecting the Market in 2021 on Latest Hacking News
