Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Almost every application contains security vulnerabilities, some of which you may find today, but others would remain invisible until someone else finds and ex…
The infamous eGobbler hacking group that surfaced online earlier this year with massive malvertising campaigns has now been caught running a new campaign explo…
We already have witnessed the innovativeness of criminal hackers in exploiting various services to bait users. From regular email phishingScammers Exploit Goog…
Google has released an urgent software update for its Chrome web browser and is urging Windows, Mac, and Linux users to upgrade the application to the latest a…
N-able said it has taken N-central Hosted Environments offline and is urging on-premises customers to shut down their servers until further notice following th…
New krb5 packages are available for Slackware 15.0 and -current to fix security issues.
An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security …
Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to r…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vul…
Several vulnerabilities were discovered in rsync, a fast, versatile, remote (and local) file-copying tool, which could result in local privilege escalation, by…
Scammers are impersonating major brands and celebrities to lure consumers into fake gift card giveaways that collect personal information and trigger unwanted …
An update that solves 29 vulnerabilities and contains one feature can now be installed.
Google, Meta and TikTok each filed suit in federal court against an incoming California law that blocks platforms from deploying features considered “psycholog…
A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are config…
A critical finding can move through several security tools and still leave the organization exposed. The vulnerability has a severity score, and a ticket has r…
A WordPress vulnerability is being used in attacks that target the moment a site updates its main software.
A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The atta…
Two flaws in the Xen hypervisor allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on the same host, including dom0. Dom0 i…
A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin. The fla…
An update that fixes one vulnerability is now available.
Several security issues were found in Squid, a caching proxy for the web. These issues could allow request smuggling, buffer overflows or FTP command injection…
Your team is remediating more vulnerabilities than ever, yet your breach risk has barely changed. You’re spending too much time and effort on exposures attacke…
New expat packages are available for Slackware 15.0 and -current to fix security issues.
A vulnerabilitiy was discovered in git-annex, a tool to manage large files with git, without storing the file contents in git, which could result in data exfil…
