Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to WebKitGTK 2.46.3: Flatten layers to a plane when preseve-3d style is set. Fix DuckDuckGo links by adding a user agent quirk. Fix several crashes and …
An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfe…
Recently, Google released an important security update for the Chrome browser to address two significant vulnerabilities''an out-of-bounds write in the Dawn sy…
Unknown threat actors have been observed attempting to exploit a now-patched security flaw in the open-source Roundcube webmail software as part of a phishing …
Hackers have recently been observed actively targeting the Apache AXIS server to deploy malicious web shells, exposing significant vulnerabilities and risks fo…
Cybercriminals have been relentlessly attacking the digital landscape, aiming to exploit vulnerabilities in well-known systems. One such exploit is the recentl…
Cybersecurity researchers have uncovered a new malware campaign targeting Linux environments to conduct illicit cryptocurrency mining and deliver botnet malwar…
A serious code execution vulnerability compromised the security of the GiveWP WordPress plugin, risking thousands…GiveWP Plugin Vulnerability Risked 100,000+ W…
WordPress admins using the Litespeed Cache plugin must update their sites with the latest plugin…LiteSpeed Cache Plugin Vulnerability Risked 5+ Million WordPre…
A maximum-severity security flaw has been disclosed in the WordPress GiveWP donation and fundraising plugin that exposes more than 100,000 websites to remote c…
Multiple vulnerabilities have been discovered in WebKitGTK+, the worst of which could lead to arbitrary code execution
A group of security researchers from the Graz University of Technology have demonstrated a new side-channel attack known as SnailLoad that could be used to rem…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting the Oracle WebLogic Server to the Known Exploited …
Security is vital for your Linux web apps, but keeping up with the latest exploits and meeting compliance standards can quickly become overwhelming.
Security is vital for your Linux web apps, but keeping up with the latest exploits and meeting compliance standards can quickly become overwhelming.
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to remote code execution.
A security researcher spotted numerous vulnerabilities in the Invision Community software that risked the corresponding…Invision Community Vulnerabilities Risk…
Roundcube Webmail could allow cross-site scripting (XSS) attacks.
A critical security vulnerability has been found in the popular Joomla open-source content management system that has left millions of websites open to the ris…
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to remote code execution.
Several security issues were fixed in WebKitGTK.
Multiple vulnerabilities have been found in WebKitGTK+, the worst of which may lead to remote code execution.
Several security issues were fixed in WebKitGTK.
The threat actors associated with the 8220 Gang have been observed exploiting a high-severity flaw in Oracle WebLogic Server to propagate their malware.The sec…
