The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The updated packages fix a security vulnerability: In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop a…
Updated python-waitress packages fix security vulnerabilities: If a front-end server does not parse header fields with an LF the same way as it does those wit…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Another wave of ransomware attacks are targeting systems with a novel strategy. As discovered by researchers, the new ransomware campaignNew Ransomware Attacks…
Open-source software isn't a completely chaotic and breached wasteland of vulnerabilities. It's a global effort to make the development lifecycle faster.
Ilja Van Sprundel discovered a buffer overflow vulnerability in ppp, the Point-to-Point Protocol daemon. When receiving an EAP Request message in client mode, …
Opinion: It was incompetence, not politics, that led to the Iowa caucus app misfiring. Above all, it was poor programming. Open-source software techniques coul…
A researcher found numerous security flaws in the WhatsApp Desktop platform for both Windows and macOS. The vulnerabilities could allowWhatsApp Desktop Platfor…
An anti-malware is nothing but a software program that our computer needs in order to prevent, find out, and tossWhat Makes An Anti-Malware App Suitable For Yo…
An out-of-bounds write vulnerability due to an integer overflow was reported in libexif, a library to parse EXIF files, which could result in denial of service…
A flaw that gave out root privileges gets patched. It is a utility that,ÂsaidDan Goodin inÂArs Technica,Âcan be found in "dozens of Unix-like operating systems…
As another step towards tightening up the Linux kernel security, Intel's Kristen Carlson Accardi has proposed "FGKASLR" as a significant step forward for bette…
This package allowed ../ directory traversal to access private resources because resource matching did not ensure that pathnames were in a canonical format.
Several Cisco-manufactured network equipments have been found vulnerable to five new security vulnerabilities that could allow hackers to take complete control…
This update incorporates fixes from the upstream glibc 2.29 stable release branch, including a fix for a minor security vulnerability ([`LD_PREFER_MAP_32BIT_EX…
OpenSMTPD could be made to run programs as root if it received specially crafted input over the network.
Strong, unbroken encryption is essential in protecting users' privacy and the integrity of sensitive data, yet encryption technology is currently under threat …
Researchers have found another WordPress plugin to be posing a threat to hundreds of thousands of websites. Specifically, they aWordPress Plugin “Code Snippets…
This update is based on upstream 5.4.17 and fixes atleast the following security vulnerabilities: In a Linux KVM guest that has PV TLB enabled, a process in t…
Lately, we heard of the Mitsubishi data breach. Now, here is another Japanese firm making it to the news forJapanese Firm NEC Electronics Confirm Security Brea…
Two security issues were found in the Qt library, which could result in plugins and libraries being loaded from the current working directory, resulting in pot…
Remember the recent payment card breach at Wawa convenience stores?If you're among those millions of customers who shopped at any of 850 Wawa stores last year …
Security researchers have discovered a vulnerability inside a core email-related library used by many BSD and Linux distributions.ÂThe vulnerability, tracked a…
The WireGuard VPN protocol, which is smaller, faster and easier to configure than IPsec, has been merged into Linus Torvalds' git repository for version 5.6 of…