Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
We're living in times where internet privacy could soon become a myth with companies putting in their best foot to get hold of our data for advertising and oth…
Google might have mistakenly shared your private videos saved on the company's servers with other users, the tech giant admitted yesterday in a security notifi…
Strong, unbroken encryption is essential in protecting users' privacy and the integrity of sensitive data, yet encryption technology is currently under threat …
Lately, we heard of the Mitsubishi data breach. Now, here is another Japanese firm making it to the news forJapanese Firm NEC Electronics Confirm Security Brea…
Updated sqlite3 packages fix security vulnerabilities: An out of bounds write flaw (CVE-2019-13734), insufficient data validation flaw (CVE-2019-13750), unini…
One of the most significant projects from the Apache Foundation has released another version of SpamAssassin. This is primarily a security release, but also in…
FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c (CVE-2020-5395) FontForge 20190801 has a heap-based buffer overflow in the Type2NotDef…
An election security group has said the Justice Department's renewed calls for access to encrypted data could impact more than privacy, stating:Â'Any effort to…
If you have ever contacted Microsoft for support in the past 14 years, your technical query, along with some personally identifiable information might have bee…
libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry (CVE-2019-18408) SL7 x86_64 lib…
An update for openvswitch2.12 is now available for Fast Datapath for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Mode…
An update for openvswitch2.11 is now available for Fast Datapath for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Mode…
Researchers have found numerous popular Android camera apps stealing users' data and spying on them. Android Camera Apps Caught SpyingPopular Android Camera Ap…
PySAML2 could be made to bypass signature verification with arbitrary data.
An update for openvswitch2.12 is now available for Fast Datapath for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Mode…
An update for openvswitch2.11 is now available for Fast Datapath for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Mode…
An update for openvswitch is now available for Fast Datapath for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate…
In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would …
**Version 4.9.4** (2020-01-07) - issue #15724 Fix 2FA was disabled by a bug - issue [security] Fix SQL injection vulnerability on the user accounts page (PM…
Applications using libpcap could be made to crash if given specially crafted data.
Included in Log4j 1.2, a logging library for Java, is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to re…
Your data is worth more than you can imagine, and this is why advertisers turn to all kinds of tactics to collect information about you, including a method tha…
When pasting a tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into c…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, data exfiltrati…
