Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
David Bouman discovered a heap-based buffer overflow vulnerability in the base64 functions of aide, an advanced intrusion detection system, which can be trigge…
AIDE could be made to crash or run programs as an administrator if it opened a specially crafted file.
Cybersecurity teams from Microsoft on Saturday disclosed they identified evidence of a new destructive malware operation dubbed "WhisperGate" targeting governm…
Updated RHEL-8 based Cryostat container images are now available Red Hat Product Security has rated this update as having a security impact of Important. A Com…
This is the second service release to update the new stable version 1.5. It provides a bunch of small fixes and improvements to the OAuth feature as well as a …
Researchers have identified a new phishing attack where the hackers exploit the Google Docs Comment…New Phishing Campaign Exploits Google Docs Comment Feature …
Threat actors leveraged a cloud video hosting service to carry out a supply chain attack on more than100 real estate websitesoperated by Sotheby's Realty that …
Apple recently fixed a security vulnerability in the macOS operating system that could be potentially exploited by a threat actor to "trivially and reliably" b…
Months after the announcement, Microsoft has released end-to-end encryption for all Microsoft Teams users. All…Microsoft Teams End-to-End Encryption Now ‘Gener…
After the disastrous Log4j vulnerability disrupted the online world, another vulnerability surfaced online. It turns…Another Apache Log4j Bug Discovered – Patc…
Cyber threats used to be less threatening. While nobody wants their customers' credit card numbers stolen in a data breach, or to see a deranged manifesto plas…
Europol, the European Union's premier law enforcement agency, hasannouncedthe arrest of a third Romanian national for his role as a ransomware affiliate suspec…
Details have emerged about what's the first Rust-language-based ransomware strain spotted in the wild that has already amassed "some victims from different cou…
Microsoft on Monday announced the seizure of 42 domains used by a China-based cyber espionage group that set its sights on organizations in the U.S. and 28 oth…
Upstream details at : https://access.redhat.com/errata/RHSA-2021:4913
The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification vers…
Update containerd and moby-engine - Security fix for CVE-2021-41190
Update containerd and moby-engine - Security fix for CVE-2021-41190
Security researchers have discovered a Linux-based remote access trojan (RAT) that uses an unusual stealth technique to remain out of sight from security produ…
Release of stargz snapshotter v0.10.1. This release contains the mitigation for CVE-2021-41190. Please see the release note for details. https://github.com/con…
Release of stargz snapshotter v0.10.1. This release contains the mitigation for CVE-2021-41190. Please see the release note for details. https://github.com/con…
**Version 1.4.12** * Enigma: Fix bug where signature verification could fail for non-ascii bodies (#7919) * Fix bug where contacts search didn't work with addr…
Robinhood, a popular stock trading and investment company in the US, recently informed the public…Hackers Selling 7 Million Robinhood User Email Addresses on L…
Several security issues were fixed in Mailman.
