Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security fix for CVE-2023-1350
openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) For more details about the security issue(s), including the impact, a CVSS score, ac…
nss: Arbitrary memory write via PKCS 12 (CVE-2023-0767) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and …
Several security issues were fixed in object-path.
The North Korean advanced persistent threat (APT) actor dubbed ScarCruft is using weaponized Microsoft Compiled HTML Help (CHM) files to download additional ma…
After being in development for years, Intel's shadow stack support is set to be merged for the upcoming Linux 6.4 cycle. The shadow stack support is part of In…
The threat group tracked asREF2924has been observed deploying previously unseen malware in its attacks aimed at entities in South and Southeast Asia.The malwar…
The threat group tracked asREF2924has been observed deploying previously unseen malware in its attacks aimed at entities in South and Southeast Asia.The malwar…
Poorly managed Linux SSH servers are being targeted as part of a new campaign that deploys different variants of a malware called ShellBot."ShellBot, also know…
As many as 55 zero-day vulnerabilities were exploited in the wild in 2022, with most of the flaws discovered in software from Microsoft, Google, and Apple.Whil…
Several security issues were fixed in curl.
Several security issues were fixed in Vim.
After rolling out the feature to its subscribers, NordVPN has now announced expanding Meshnet accessibility…NordVPN Rolls Out Meshnet For Public, Including Non…
Tails 5.11 amnesic incognito live system has been released today as a monthly update to this security-focused Debian-based GNU/Linux distribution aimed at pres…
One of the security fixes released as DLA 3315 introduced a regression in the processing WAV files with variable bitrate encoding. Updated sox packages are ava…
The newest upstream commit Security fixes for CVE-2023-1175, CVE-2023-1170, CVE-2023-1264.
Security fixes for CVE-2023-1175, CVE-2023-1170, CVE-2023-1264.
Multiple high-impact security issues have been discovered in Thunderbird, which could result in denial of service (DoS) attacks leading to server crashes and l…
Update to 102.9.0 ; https://www.mozilla.org/en- US/security/advisories/mfsa2023-11/ ; https://www.thunderbird.net/en- US/thunderbird/102.9.0/releasenotes/
The previous Imagemagick security update caused a regression in some perl packages due to overly restrictive hardening in a policy update (reading from /etc/ w…
U.S. government agencies have released a joint cybersecurity advisory detailing the indicators of compromise (IoCs) and tactics, techniques, and procedures (TT…
update to 111.0.5563.64. Fixes the following security issues: CVE-2023-0927 CVE-2023-0928 CVE-2023-0929 CVE-2023-0930 CVE-2023-0931 CVE-2023-0932 CVE-2023-0933…
Security fix for CVE-2022-41717
Security fix for CVE-2023-27320
