Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169) * OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540) * OpenJDK:…
OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169) * OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540) * OpenJDK:…
The 8220 cryptomining group has expanded in size to encompass as many as 30,000 infected hosts, up from 2,000 hosts globally in mid-2021."8220 Gang is one of t…
Researchers discovered a severe security vulnerability in the Android Photos app that exposed Amazon access…High-Severity Vulnerability Found In Amazon Photos …
Last month Microsoft issued the first production release of CBL-Mariner 2.0 , its in-house Linux distribution used for powering services from Microsoft Azure t…
- lockState: do not print `error:` when exit code is unaffected (#2090926) ---- - fix potential DoS from unprivileged users via the state file (CVE-2022-1348)
Several botnets are now using exploits targeting a critical remote code execution (RCE) vulnerability to infect Linux servers running unpatched Atlassian Confl…
This update upgrades Firefox to version 91.9.1 ESR. * Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution (CVE-2022-152…
This update upgrades Firefox to version 91.9.1 ESR. * Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution (CVE-2022-152…
This update upgrades Thunderbird to version 91.9.1. * Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution (CVE-2022-152…
Heads up Chrome users! Google has just pushed another update to its Chrome browser, once…Latest Google Chrome Update Fixed Another Zero-Day Flaw on Latest Hack…
Microsoft'sPatch Tuesday updatefor the month of March has been made officially available with 71 fixes spanning across its software products such as Windows, O…
Three high-impact security vulnerabilities have been disclosed inAPC Smart-UPS devicesthat could be abused by remote adversaries as a physical weapon to access…
Three high-impact security vulnerabilities have been disclosed inAPC Smart-UPS devicesthat could be abused by remote adversaries as a physical weapon to access…
Newly discovered vulnerability “Dirty Pipe” vulnerability most Linux distros, giving root access to the attacker…Linux Dirty Pipe Exploit Gives Root Access – P…
As many as seven security vulnerabilities have been disclosed in PTC's Axeda software that could be weaponized to gain unauthorized access to medical and IoT d…
Researchers have discovered a severe bug in the Safari 15 browser that potentially leaks a…Safari 15 Browser Vulnerability Potentially Exposes User Data – Appl…
A dependency used to extract docker/OCI image layers can be tricked into modifying host files by creating a malicious layer that has a symlink with the name ".…
After the disastrous Log4j vulnerability disrupted the online world, another vulnerability surfaced online. It turns…Another Apache Log4j Bug Discovered – Patc…
Mozilla is beginning to roll out Firefox 95 with a new sandboxing technology called RLBox that prevents untrusted code and other security vulnerabilities from …
Months after researchers detailed Braktooth bugs, they now have released the PoC exploit to the…US CISA Pushes Vendors For BrakTooth Patches After PoC Goes Pub…
A critical Linux kernel bug (CVE-2021-43267) exists in a TIPC message type that allows Linux nodes to send cryptographic keys to each other, and could allow re…
Despite security measures in place, researchers have found how to analyze and exploit Bluetooth transmissions…Tracking Mobile Devices by Analyzing Bluetooth Tr…
Recently, Google has released another major update for Chrome users. The new update addresses a…Google Chrome Patched Another Zero-Day Bug Within A Month on La…
