Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Have you heard about IPFire's new method of cryptographic kernel rootkit protection?ÂIPFire is an open-source software that protects the network from external …
Network firewalls are the workhorses of modern cybersecurity. They are trusted to protect the network, blocking malicious traffic and preventing intrusions and…
Cisco is urging customers to patch two security flaws impacting the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisc…
A type confusion vulnerability within the Linux Kernel's nftables subsystem - CVE-2024-42070 - was recently discovered, requiring urgent mitigation through ker…
Multiple issues were found in modsecurity-crs, a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls, which …
Multiple issues were found in modsecurity-apache, open source, cross platform web application firewall (WAF) engine for Apache which allows remote attackers to…
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targetin…
The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate ad…
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active…
ModSecurity has released fixes for a group of web application firewall (WAF) weaknesses that can let dangerous input reach Linux-hosted applications without be…
Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewa…
A Linux server can be carefully hardened before it reaches production and still become less secure over time. Hardening means reducing unnecessary services, ac…
The Fedora update for nginx-mod-naxsi includes a rebuild for version 1.30.4 and addresses multiple CVEs, enhancing security and functionality for the web appli…
An administrator reports unusual outbound traffic from a Linux server after firewall logs show repeated connections to an unfamiliar external IP address. Nothi…
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys.A Shodan harveste…
A SANS audit of 14 patched SonicWall firewalls shows Akira ransomware still getting in via stale accounts and LDAP misconfigurations the firmware update never …
A reverse shell makes the target machine initiate the connection back to the attacker, bypassing firewalls that only filter inbound traffic. This guide walks t…
Amazon Threat Intelligence is warning of an active Interlock ransomware campaign that's exploiting a recently disclosed critical security flaw in Cisco Secure …
Cybersecurity strategies often focus on firewalls, endpoint protection, and vulnerability patching. While these controls are critical, hosting infrastructure v…
You probably already have firewall rules in place, regular patching cycles, and logs flowing into a SIEM. That covers a lot. What it does not tell you is wheth…
As you know, enterprise network security has undergone significant evolution over the past decade. Firewalls have become more intelligent, threat detection met…
On most long-running Linux servers, UFW rules don't get removed; they get forgotten. Services change, ports shift, packages come and go, and the firewall stops…
If you manage Linux systems in production, you already operate with multiple layers in place. Network firewalls, SELinux or AppArmor, IDS and IPS, and regular …
SonicWall has formally implicated state-sponsored threat actors as behind the September security breach that led to the unauthorized exposure of firewall confi…
