Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Protection from cyberattacks begins way before attackers launch their weapons on an organization. Continuously monitoring the environment for security weakness…
libpcap (Packet CAPture), a low-level network monitoring library, does not properly validate the PHB header length before allocating memory. This update added …
Several vulnerabilities have been discovered in tcpdump, a command-line network traffic analyzer. These vulnerabilities might result in denial of service or, p…
CEOs who lie about misusing consumers data could face up to 20 years in jail under a new piece of US legislation proposed last week. What are your thoughts on …
Once again, a peculiar phishing attack has surfaced online, this time, targeting Stripe users. The attack not only aims atPhishing Attack Targets Stripe Users …
Despite the presence and implementation of robust security protocols, various persistent and ever-evolving hacking strategies continue to exist. This clearlyHa…
It was discovered that Aspell, the GNU spell checker, incorrectly handled certain inputs which leads to a stack-based buffer over-read. An attacker could poten…
Are you a Massachusetts resident? Face surveillance by government poses a threat to our privacy, chills protest in public places, and amplifies historical bias…
The update of libsdl1.2 released as DLA 1713-1 led to a regression, caused by an incomplete fix for CVE-2019-7637. This issue was known upstream and resulted, …
The updated packages fix a security vulnerability: Potential bypass of Runas user restrictions. (CVE-2019-14287) References:
Updated e2fsprogs packages fix security vulnerability: Lilith of Cisco Talos discovered a buffer overflow flaw in the quota code used by e2fsck from the ext2/…
This kernel update is based on the upstream 5.3.6 and fixes several issues. * a potential kernel crash by using suppress-prefix rule in ipv6 * 3rdparty rtl87…
Updated nmap packages fix security vulnerability: Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack …
Mozilla has announced another bold step towards ensuring better security for users. This time, they will be fending off codeMozilla Hardens Their Firefox Brows…
Joe Vennix discovered that sudo, a program designed to provide limited super user privileges to specific users, when configured to allow a user to run commands…
Sudo could be made to run commands as root if it called with a specially crafted user ID.
The tiny ATtiny85 chip doesnt look like the next big cyberthreat facing the world, but sneaking one on to a firewall motherboard would be bad news for security…
This update includes the changes in tzdata 2018c. Notable changes are: - Brazil has canceled DST and will stay on standard time indefinitely.
The update for openssl released as DSA 4539-1 introduced a regression where AES-CBC-HMAC-SHA ciphers were not enabled. Updated openssl packages are now availab…
- Update jackson-parent to version 2.10. - Update jackson-bom to version 2.10.0. - Update jackson-annotations to version 2.10.0. - Update jackson-core to versi…
- Update jackson-parent to version 2.10. - Update jackson-bom to version 2.10.0. - Update jackson-annotations to version 2.10.0. - Update jackson-core to versi…
A 39-year-old password of Ken Thompson, the co-creator of the UNIX operating system among, has finally been cracked that belongs to a BSD-based system, one of …
Several vulnerabilities have been discovered in tcpdump, a command-line network traffic analyzer. These security vulnerabilities might result in denial of serv…
Continuing with the ongoing wave of phishing campaigns, another attack surfaced online. This one abuses Amazon AWS services to trickNew Phishing Attack Sends F…
