The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
There are lots of books on tools and techniques to secure software containers, but what happens when someone discovers a basic architectural flaw? And what do …
A very serious flaw in the Internet's DNS servers may have been ripe for a significant exploit, though a familiar security researcher might have sounded the al…
Even with Apache's focus on producing a secure product, the Web server can still be vulnerable to any number of attacks if you fail to take some security preca…
They have demonstrated that users could open up their router's traffic as a result of visiting a web page loaded with malicious javascript. The researchers sai…
EEye Digital Security has uncovered new security holes affecting a wide range of RealNetworks' media players, the latest desktop-based bugs set to worry IT man…
Three Brisbane university students have discovered a major flaw in wireless network technology that means hackers can bring down critical infrastructure in as …
This week, perhaps the most interesting articles include "Rumors of Third Vulnerability in Linux Kernel Prove Unfounded," "VLANs on Linux," and "Open Source Ge…
Laptops are vulnerable to theft, greatly increasing the likelihood of exposing sensitive files. Unfortunately, storing data in a cryptographic file system does…
Daniel Roberts discovered a binary named "ABfrag" on one of his servers after detecting suspicious network activity. He sent in a note requesting anyone with i…
Vendors have not issued updates yet for a vulnerability just reported by the Squid Project. "Under some conditions Squid may forward the proxy authentication c…
Update: For millions of websites that were vulnerable care of ISS , Apache is not too happy. ISS (Internet Security Systems) released an insufficient patch alo…
There is no doubt that the Internet has brought unparalleled connectivity to computers, especially in the last few years. But ironically, this very advantage h…
The CORE SDI team has found a vulnerability in the SSH 1.5 protocol that allows an attacker to retrieve the session key, which could then allow them to decrypt…
Microsoft today issued a new security advisory warning billions of Windows users of two new critical, unpatched zero-day vulnerabilities that could let hackers…
The Department of Homeland Security and CISA ICS-CERT will today issue a critical security advisory warning about over a dozen newly discovered vulnerabilities…
A zero-day vulnerability has been discovered in Zoom video conferencing software for Windows that could allow an attacker to execute arbitrary code on a victim…