Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
SolarWinds, the Texas-based company that became the epicenter of aÂmassive supply chain attackÂlate last year, has issued patches to contain a remote code exec…
This kernel-linus update is based on upstream 5.10.48 and fixes atleast the following security issues: The Linux kernel through 5.8.13 does not properly enforc…
This kernel update is based on upstream 5.10.48 and fixes atleast the following security issues: The Linux kernel through 5.8.13 does not properly enforce the …
A common misconception among startup founders is that cybercriminals won't waste time on them, because they're not big or well known enough yet.But just becaus…
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (pass…
A flaw was found in the Dynamic Host Configuration Protocol (DHCP). There is a discrepancy between the code that handles encapsulated option information inleas…
Widespread adoption of containerization and DevOps has introduced new cyber risks, but organizations are showing signs of maturing and adapting to the challeng…
Kernel developers have gracefully accepted suggestions concerning release signing process
An update that fixes two vulnerabilities is now available.
The kernel-linus update in MGASA-2021-0258 contained some security fixes that caused regressions in atleast some container and chroot setups. This update provi…
The kernel update in MGASA-2021-0257 contained some security fixes that caused regressions in atleast some container and chroot setups. This update provides up…
Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey u…
It seems like every new day brings with it a new ransomware news item ' new attacks, methods, horror stories, and data being leaked.Ransomware attacks are on t…
This is the June update for .NET Core 3.1. It updates the .NET Core runtime to 3.1.16 and the .NET SDK to 3.1.116. This update includes a fix for CVE-2021-3195…
This is the .NET 5.0 update for June 2021. It includes a fix for CVE-2021-31957: ASP.NET Denial of Service Vulnerability
This is the June update for .NET Core 3.1. It updates the .NET Core runtime to 3.1.16 and the .NET SDK to 3.1.116. This update includes a fix for CVE-2021-3195…
This is the .NET 5.0 update for June 2021. It includes a fix for CVE-2021-31957: ASP.NET Denial of Service Vulnerability
An emerging ransomware strain in the threat landscape claims to have breached 30 organizations in just four months since it went operational by riding on the c…
New upgrades have been made to a Python-based "self-replicating, polymorphic bot" called Necro in what's seen as an attempt to improve its chances of infecting…
A team of security researchers from Google has demonstrated yet another variant of the Rowhammer vulnerability that targets increasingly smaller DRAM chips to …
Ivanti, the company behind Pulse Secure VPN appliances, has published a security advisory for a high severity vulnerability that may allow an authenticated rem…
An update that fixes one vulnerability is now available.
An update for .NET 5.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important…
An authentication flaw was found in ceph. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY requests, it doesn't sanitize other_keys, allowing key reuse. An …
