Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Twitter for Android app had another bugÂthat exposed users' phone numbers. By exploiting the vulnerability, a researcher succeeded in matchingTwitter For Andro…
Twitter has disclosed a vulnerability that potentially threatened Android users. As revealed, the Twitter for Android app had a flawTwitter For Android App Fla…
It was discovered that debian-lan-config, a FAI config space for the Debian-LAN system, configured too permissive ACLs for the Kerberos admin server, which all…
The most sweeping data-privacy law in the country kicks in Jan. 1. The CCPA, short for the California Consumer Privacy Act, gives residents of the Golden State…
Almost every week, we hear about anotherÂcorporate data breachÂorÂgovernment attack on privacy. For anyone who wants real privacy online, encryption is the ess…
The updated packages fix security vulnerabilities: Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to …
Security experts from Netlab 360 have uncoveredÂa new Remote Access Trojan (RAT) used on Linux and Windows operating systems ' currently being used in the wild…
The extensively marketed Ring smart devices are once again in hot water. Recently, numerous reports have surfaced online highlighting severalHackers Continue t…
Researchers have uncovered a new malware campaign which they dub the 'Hornets Nest'. What makes this attack notable is theResearchers Uncovered Malware That Dr…
Another cyberattack on the healthcare sector has put the privacy of millions of users at risk. Recently, a Canadian healthcareLifeLabs Disclosed Data Breach Im…
A change introduced in libssh 0.6.3-4+deb8u4 (which got released as DLA 2038-1) has broken x2goclient's way of scp'ing session setup files from client to serve…
Not much time has passed since Google launched its Chrome browser version 79 with improved privacy and security features. However,Update For Google Chrome 79 O…
Stephan Zeisberg reported an out-of-bounds write vulnerability in the _sasl_add_string() function in cyrus-sasl2, a library implementing the Simple Authenticat…
There has been an out-of-bounds write in Cyrus SASL leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP c…
Linux network stack maintainerÂDavid MillerÂhasÂcommittedÂthe WireGuard VPN project into the Linux "net-next" source tree. Miller maintains bothÂnetÂandÂnet-ne…
Updated libssh packages fix security vulnerability: In an environment where a user is only allowed to copy files and not to execute applications, it would be …
It was discovered that debian-edu-config, a set of configuration files used for the Debian Edu blend, configured too permissive ACLs for the Kerberos admin ser…
Are you a Mozilla Firefox user looking to better protect your privacy online? Good news for Firefox users interested in turning on the browser'sÂDNS-over-HTTPS…
It was discovered that there was a potential account hijack vulnerabilility in Django, the Python-based web development framework.
Kernel: KVM: OOB memory access via mmio ring buffer (CVE-2019-14821) Bug Fix(es): * KEYS: prevent creating a different user's keyrings SL-6.10 * BUG: unable to…
A serious security bug affected numerous TP-Link routers. The vulnerability in TP-Link Archer routers could allow a potential attacker toBuffer Overflow Exploi…
An issue has been found in harfbuzz, an OpenType text shaping engine. Due to a buffer over-read, remote attackers are able to cause a denial of
It was found that libssh, a tiny C SSH library, does not sufficiently sanitize path parameters provided to the server, allowing an attacker with only SCP file …
openslp: Heap-based buffer overflow in ProcessSrvRqst() in slpd_process.c leading to remote code execution (CVE-2019-5544) SL7 x86_64 openslp-2.0.0-8.el7_7.i68…
