Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
It was discovered that exim4, a mail transport agent, suffers from a authentication bypass vulnerability in the spa authentication driver. The spa authenticati…
OpenConnect, a VPN software, had a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certifica…
Updated suricata packages fix security vulnerabilities: The suricata package has been updated to version 4.1.8, which fixes security issues and other bugs. See…
Are you a security researcher, pen-tester or ethical hacker? If so, you will definitely want to check out Kali Linux 2020.2. This release includes infrastructu…
A new version of COMpfun remote access trojan (RAT) has been discovered in the wild that uses HTTP status codes to control compromised systems targeted in a re…
Fix for CVE-2020-5283. ViewVC 1.1.28 ChangeLog - security fix: escape subdir lastmod file name (#211) - fix standalone.py first request failure (#195) ViewVC 1…
When normalizing ar member names by removing trailing whitespace and slashes, an out-out-bound read can be caused if the ar member name consists only of such c…
Another WordPress plugin with over 1 million active installations has made it to the news due to security bugs. ThisPage Builder WordPress Plugin Bugs Could Al…
NOTE: This DLA was intially sent on 2020-04-14 but for reasons unknown failed to reach the mailing list. It is being re-sent now to ensure that it appears in t…
This update includes a security fix for CVE-2020-10737. Additionally, From 0.34.6: - update license on src/buffer.h - changes "/var/run" to "/run" in systemd s…
Last Upstream release, including (among others): - (security) Prevent execution of SQL injection while assigning a technician, - (security) Permit to change ke…
Yesterday, on the 3rd anniversary of the infamous global WannaCry ransomware outbreak for which North Korea was blamed, the U.S. government released informatio…
Adopting open-source software and technology has the potential to improve an organizations' security posture if this technology is properly monitored and maint…
Huawei has denied having any official involvement in an insecure patch submitted to the Linux kernel project over the weekend, which introduced a "trivially ex…
Herbert Gilbert got the first patent on a smoke-free cigarette that he described as a device that provided a harmlessIs Your E-Cig a Security Risk? on Latest H…
WordPress websites suffered another threat from vulnerable plugins. This time, security bugs in two related WordPress plugins posed a threatBugs Two Related Wo…
WordPress websites suffered another threat from vulnerable plugins. This time, security bugs in two related WordPress plugins posed a threatBugs in Two Related…
Mozilla has taken another step ensuring utmost privacy to its users. This time, they are preparing to launch Firefox PrivateMozilla Gears Up To Launch Firefox …
Multiple security issues have been found in Thunderbird which could result in spoofing the displayed sender email address, denial of service or potentially the…
**Version 1.4.4** This is a **service and security update** to the stable version 1.4 of Roundcube Webmail. It contains four fixes for recently reported securi…
**Version 1.4.4** This is a **service and security update** to the stable version 1.4 of Roundcube Webmail. It contains four fixes for recently reported securi…
**Version 1.4.4** This is a **service and security update** to the stable version 1.4 of Roundcube Webmail. It contains four fixes for recently reported securi…
Multiple security issues have been found in Thunderbird which could result in spoofing the displayed sender email address, denial of service or potentially the…
Have you heard that GoDaddy has admitted customer usernames and passwords for connecting remotely to Linux servers via SSH have been compromised, forcing provi…
