Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple security issues were discovered in the Rails web framework which could result in cross-site scripting, information leaks, code execution, cross-site r…
Jenkins'a popular open-source automation server software'published an advisory on Monday concerning a critical vulnerability in the Jetty web server that could…
Popular data breach logging website 'Have I Been Pwned' has now announced the code base of 'Have I Been Pwned''Have I Been Pwned' Code Base Goes Open Source on…
chromium-browser: Use after free in ANGLE (CVE-2020-6463) * chromium-browser: Inappropriate implementation in WebRTC (CVE-2020-6514) * Mozilla: Potential leak …
chromium-browser: Use after free in ANGLE (CVE-2020-6463) * chromium-browser: Inappropriate implementation in WebRTC (CVE-2020-6514) * Mozilla: Potential leak …
Garmin, the maker of fitness trackers, smartwatches and GPS-based wearable devices, is currently dealing with a massive worldwide service interruption after ge…
It was discovered that Django, a high-level Python web development framework, did not properly sanitize input. This would allow a remote attacker to perform SQ…
It was discovered that there was a regression in the latest update to Django, the Python web development framework. The upstream fix for CVE-2020-13254 to addr…
Cybersecurity researchers today uncovered a new advanced version of ComRAT backdoor, one of the earliest known backdoors used by the Turla APT group, that leve…
Do you use Firefox as your web browser? Have you heard that the latest version of Firefox will now alert you of security breaches and protect your saved passwo…
A new malware campaign has been found using coronavirus-themed lures to strike government and energy sectors in Azerbaijan with remote access trojans (RAT) cap…
Cybersecurity researchers today uncovered an ongoing new Magecart skimmer campaign that so far has successfully compromised at least 19 different e-commerce we…
If you use Apple iPhone or MacBook, here we have a piece of alarming news for you.Turns out merely visiting a website ' not just malicious but also legitimate …
A new simple but dangerous strain of Android malware has been found in the wild that steals users' authentication cookies from the web browsing and other apps,…
Vendors behind the Blisk browser ' a dedicated browser for web developers ' inadvertently left a database unsecured that leakedBlisk Browser Vendors Leaked Dat…
A new simple but dangerous strain of Android malware has been found in the wild that steals users' authentication cookies from the web browsing and other apps,…
A federal judge in New York on Monday declared a mistrial in the case of a former CIA software engineer who was accused of stealing a massive trove of the agen…
If you are a T-Mobile customer, this news may concern you.US-based telecom giant T-Mobile has suffered yet another data breach incident that recently exposed p…
A sophisticated hacker group pwned Amazon Web Services (AWS) servers, set up a rootkit that let them remotely control servers, then merrily funnelled sensitive…
Heads up all Google AdSense users. A new email extortion scam is in the wild that threatens website owners servingNew Email Extortion Scam Threatens Banning of…
A popular WordPress theme plugin with over 200,000 active installations contains a severe but easy-to-exploit software vulnerability that, if left unpatched, c…
An election campaigning website operated by Likud'the ruling political party of Israeli Prime Minister Benjamin Netanyahu'inadvertently exposed personal inform…
The Indonesian National Police in a joint press conference with Interpol and cybersecurity firm Group-IB earlier today announced the arrest of three Magecart-s…
When pasting a tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into c…
