Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
At one point, the internet has connected us to countless opportunities, on the other, it has also made us prone7 Cyber Security Challenges in 2020! on Latest H…
Are you using full-disk encryption to protect your data? If so, you may want to reconsider after reading this article.
Have you heard that links to Linux kernel documentation have been switched from HTTP to the more secure HTTPS protocol in an effort to prevent man-in-the-middl…
GLib Networking was not properly verifying TLS certificates in all circumstances, possibly allowing an integrity/confidentiality compromise. [More...]
While fast-charging helps you use your device without charging breaks, it can potentially harm your device too. The feature isn'tBadPower Attack Can Burn A Dev…
It was discovered that incorrect memory handling in the SLIRP networking implementation could result in denial of service or potentially the execution of arbit…
# July 2020 OpenJDK security update for OpenJDK 11 Full release notes: https://bitly.com/openjdk1108 ## Security fixes - JDK-8230613: Better ASCII conversions …
Several issues were found in Poppler, a PDF rendering library, that could lead to denial of service or possibly other unspecified impact when processing malici…
# July 2020 OpenJDK security update for OpenJDK 8. Full release notes: https://bitly.com/oj8u262 ## New features * [JDK-8223147](https://bugs.openjdk.java.net/…
Alongside Microsoft Patch Tuesday and other vendors, Cisco has also released fixes for numerous bugs. These include multiple critical vulnerabilitiesCisco Patc…
Have you heard that SUSE has rolled out SUSE Linux Enterprise 15 Service Pack 2 and its latest system management program, SUSE Manager 4.1? These releases incl…
notes=Security fix for CVE-2020-12108
CERT-In is urging Google Chrome users to upgrade immediately to the new version of the Chrome browser to protect sensitive information on their machines and pr…
The US Department of Homeland Security has issued another alert for the users regarding a Windows bug. Given the criticalCISA Urged Users To Patch SigRed Vulne…
Multiple vulnerabilities were found in Ruby on Rails, a MVC ruby-based framework geared for web application development, which could lead to remote code execut…
An integer overflow flaw leading to a stack-based buffer overflow was discovered in redis, a persistent key-value database. A remote attacker can use this flaw…
Michal Bentkowski discovered that ruby-sanitize, a whitelist-based HTML sanitizer, is prone to a HTML sanitization bypass vulnerability when using the "relaxed…
Two security issues were found in libopenmpt, a cross-platform C++ and C library to decode tracked music files, which could result in denial of service and pot…
Update to 2.28.3: * Fix kinetic scrolling with async scrolling. * Fix web process hangs on large GitHub pages. * Bubblewrap sandbox should not attempt to bind …
Have you heard about the growing Zephyr Project, hosted by the Linux Foundation, that aims to build an open-source real-time operating system (RTOS) for the Io…
An OPSEC error by an Iranian threat actor has laid bare the inner workings of the hacking group by providing a rare insight into the "behind-the-scenes look in…
Social media platform Twitter, earlier today on Wednesday, was on fire after it suffered one of the biggest cyberattacks in its history.A number of high-profil…
Mozilla: Information disclosure due to manipulated URL object (CVE-2020-12418) * Mozilla: Use-after-free in nsGlobalWindowInner (CVE-2020-12419) * Mozilla: Use…
In a report shared with The Hacker News, researchers at cybersecurity firm CheckPoint today disclosed details of a minor but easy-to-exploit flaw they reported…
