Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Unknown threat actors are actively exploiting a recently patched security vulnerability in the Elementor Pro website builder plugin for WordPress.The flaw, des…
The advanced persistent threat (APT) actor known as Winter Vivern is now targeting officials in Europe and the U.S. as part of an ongoing cyber espionage campa…
A group of academics from Northeastern University and KU Leuven has disclosed a fundamental design flaw in the IEEE 802.11 Wi-Fi protocol standard, impacting a…
Apple on Monday backported fixes for an actively exploited security flaw to older iPhone and iPad models.The issue, tracked asCVE-2023-23529, concerns a type c…
As a primary working interface, the browser plays a significant role in today's corporate environment. The browser is constantly used by employees to access we…
Cisco on Wednesday rolled outsecurity updatesto address a critical flaw impacting its IP Phone 6800, 7800, 7900, and 8800 Series products.The vulnerability, tr…
Two vulnerabilities were discovered in Werkzeug, a collection of utilities for WSGI (web) applications. An attacker may inject cookies in specific situations, …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on February 2addedtwo security flaws to its Known Exploited Vulnerabilities (KEV) Catalog, cit…
It was discovered that there was a potential Denial of Service (DoS) vulnerability in Django, a popular Python-based web development framework.
Martin van Kervel Smedshammer discovered that varnish, a state of the art, high-performance web accelerator, is prone to a HTTP/2 request forgery vulnerability.
Two vulnerabilities were found in lemonldap-ng, an OpenID-Connect, CAS and SAML compatible Web-SSO system, that could result in information disclosure or imper…
Security stakeholders have come to realize that the prominent role the browser has in the modern corporate environment requires a re-evaluation of how it is ma…
Cisco has warned of two security vulnerabilities affecting end-of-life (EoL) Small Business RV016, RV042, RV042G, and RV082 routers that it said will not be fi…
w3m could be made to crash or run programs as your login if it opened a malicious website.
w3m could be made to crash or run programs as your login if it opened a malicious website.
Fortinet has warned of a high-severity flaw affecting multiple versions of FortiADC application delivery controller that could lead to the execution of arbitra…
Cybersecurity researchers have detailed two security flaws in the JavaScript-based blogging platform known asGhost, one of which could be abused to elevate pri…
Threat actors affiliated with a ransomware strain known as Play are leveraging a never-before-seen exploit chain that bypasses blocking rules for ProxyNotShell…
Government entities in Ukraine have been breached as part of a new campaign that leveraged trojanized versions of Windows 10 installer files to conduct post-ex…
Two security vulnerabilities have been discovered in Cacti, a web interface for graphing of monitoring systems, which could result in unauthenticated command i…
Search giant Google on Friday released an out-of-band security update to fix a new actively exploited zero-day flaw in its Chrome web browser.The high-severity…
Multiple issues were discovered in Django, a Python-based web development framework: * CVE-2021-45452: Storage.save allowed directory traversal if
Firefox could be made to crash or run programs as your login if it opened a malicious website.
Multiple vulnerabilities were discovered in Django, a popular Python-based web development framework: * CVE-2020-24583: Fix incorrect permissions on intermedia…
