Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Firefox could be made to crash or run programs as your login if it opened a malicious website.
It was discovered that there were two vulnerabilities in Django, a popular Python-based web development framework: - CVE-2022-22818: Possible XSS via {% debug …
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform SQL injection, run unchecked SQL queries, b…
The coordinated cyberattacks targetingUkrainian government websitesand the deployment of a data-wiper malware calledWhisperGateon select government systems are…
One issue has been discovered in lighttpd: fast webserver with minimal memory footprint. CVE-2018-19052: an issue was discovered in mod_alias_physical_handler …
Lots of people ''run Linux'' without really knowing or caring '' many home routers, navigational aids, webcams and other IoT devices are based on it; the major…
Firefox could be made to crash or run programs as your login if it opened a malicious website.
Several vulnerabities have been discovered in Epiphany, the GNOME web browser, allowing XSS attacks under certain circumstances. For the stable distribution (b…
We just published a security update to the LTS version 1.4 of Roundcube Webmail. It provides a fix to a recently reported XSS vulnerability: * Cross-site scrip…
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform SQL injection, run unchecked SQL queries, b…
Google has rolled out the first round of updates to its Chrome web browser for 2022 to fix 37 security issues, one of which is rated Critical in severity and c…
An XSS vulnerability was discovered in noVNC, a HTML5 VNC client, in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the me…
Updated apache-mod_security packages fix security vulnerability: ModSecurity mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens…
Web infrastructure company Cloudflare on Wednesday revealed that threat actors are actively attempting to exploit asecond bugdisclosed in the widely used Log4j…
Firefox could be made to crash or run programs as your login if it opened a malicious website.
Mozilla has released Firefox 95 for Linux, Windows and MacOS, which features a new security sandboxing technology called RLBox that uses WebAssembly to isolate…
The U.S. Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are warning of active exploitation of a newly pa…
Amazon Web Services has announced that it will release an updated version of its own Linux every two years, starting with Amazon Linux 2022, which it is previe…
Google researchers on Thursday disclosed that it found a watering hole attack in late August exploiting a now-patched zero-day in macOS operating system and ta…
Several vulnerabilities were discovered in Icinga 2, a general-purpose monitoring application. An attacker could retrieve sensitive information such as service…
CKEditor, an open source WYSIWYG HTML editor with rich content support, which can be embedded into web pages, had two vulnerabilites as follows:
Firefox could be made to crash or run programs as your login if it opened a malicious website.
Several vulnerabilities were discovered in mailman, a web-based mailing list manager, which could result in arbitrary content injection via the options and pri…
Heads up, WordPress admins! Make sure to update your websites with the latest WP Fastest…Critical Vulnerabilities Discovered in Fastest Cache Plugin For WordPr…
