Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to upstream 1.3.2, including fix for CVE-2024-3727
Update to upstream 1.3.2, including fix for CVE-2024-3727
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
This update, to the latest upstream release, addresses an excessive memory use issue (CVE-2024-4140), which can cause denial of service when parsing multi-part…
* bsc#1122321 Cross-References: * CVE-2019-6462
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The decentralized social network Mastodon has disclosed a critical security flaw that enables malicious actors to impersonate and take over any account."Due to…
Microsoft on Monday said it detected Kremlin-backed nation-state activity exploiting a now-patched critical security flaw in its Outlook email service to gain …
The maintainers of theCurl libraryhave released an advisory warning of two security vulnerabilities that are expected to be addressed as part of an forthcoming…
Germany's Federal Office for the Protection of the Constitution (BfV) has warned of cyber attacks targeting Iranian persons and organizations in the country si…
The OpenSSL Project has released fixes to address several security flaws, including a high-severity bug in the open source encryption toolkit that could potent…
VMware ESXi hypervisors are the target of a new wave of attacks designed to deploy ransomware on compromised systems."These attack campaigns appear to exploit …
The NSA and CISA released the guide '' Securing the Software Supply Chain: Recommended Practices Guide for Developers '' last month and while David Wheeler, th…
Taiwanese company QNAP has warned customers to secure network-attached storage (NAS) appliances and routers against a new ransomware variant called DeadBolt."D…
Intelligence agencies in Australia, the U.K., and the U.S. issued a joint advisory on Wednesday detailing the most exploited vulnerabilities in 2020 and 2021, …
Amidst the massiveÂsupply-chain ransomware attackÂthat triggered an infection chain compromising thousands of businesses on Friday, new details have emerged ab…
Microsoft on Thursday warned of a "massive email campaign" that's pushing a Java-based STRRAT malware to steal confidential data from infected systems while di…
Yesterday, on the 3rd anniversary of the infamous global WannaCry ransomware outbreak for which North Korea was blamed, the U.S. government released informatio…
Remember the critical remote code execution (RCE) vulnerability in the Exim email server, CVE-2019-15846,from mid-September? Barely two weeks later, and the so…
Following the release of iOS 13 and iPadOS earlier this week, Apple has issued an advisory warning iPhone and iPad users of an unpatched security bug impacting…
Yesterday, on the 3rd anniversary of the infamous global WannaCry ransomware outbreak for which North Korea was blamed, the U.S. government released informatio…
Google on Monday warned that threat actors are hijacking enterprise access to Large Language Models (LLMs) to fraudulently leverage expensive computing resourc…
