Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Researchers found Cloudflare’s latest feature, TryCloudflare, actively exploited in malware campaigns. While the feature facilitates…TryCloudflare Exploited In…
Researchers highlighted a serious privacy and security flaw that keeps deleted and private repositories retained…GitHub Design Flaw Retains Deleted, Private Re…
Cybersecurity researchers have uncovered security shortcomings in SAP AI Core cloud-based platform for creating and deploying predictive artificial intelligenc…
Cybersecurity researchers have detailed a now-patched security flaw affecting the Ollama open-source artificial intelligence (AI) infrastructure platform that …
Fixing CVE-2023-51765 (smtp smuggling) requires to reject email that include NUL bytes, in some configuration. Previous security version of sendmail, by defaul…
JetBrains has alerted users to a critical vulnerability in its GitHub plugin for IntelliJ platforms,…JetBrains GitHub Plugin Vulnerability Affects IntelliJ IDE…
Researchers warn users to stop using the EmailGPT service due to an unpatched security vulnerability.…Quit Using EmailGPT as Vulnerability Risks Users Data on …
Two recently disclosed security flaws in Ivanti Connect Secure (ICS) devices are being exploited to deploy the infamous Mirai botnet.That's according to findin…
Several significant vulnerabilities have been found in the Thunderbird email client and Firefox web browser. An attacker could exploit these issues to disrupt …
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.…
Update llhttp to 9.2.1, fixing CVE-2024-27982. Additionally, llhttp 9.2.0 contained a number of bug fixes. Backport llhttp 9.2.1 support to python-aiohttp 3.9.…
Several significant vulnerabilities have been found in the widely used Thunderbird email client and Firefox web browser. An attacker could exploit these issues…
A series of severe security vulnerabilities have been discovered in the popular runC command line tool. These vulnerabilities, collectively known as Leaky Vess…
The U.S. National Institute of Standards and Technology (NIST) is calling attention to the privacy and security challenges that arise as a result of increased …
Researchers caught a new campaign from the notorious Konni RAT malware exploiting malicious Word files.…Konni RAT Malware Campaign Spreads Via Malicious Word F…
Months after ensuring that the patch actually works, Google has now disclosed more details about…Google Elaborates On Campaigns Exploiting A Now-Patched Zimbra…
Researchers caught a serious security flaw in JetBrains TeamCity software that could allow unauthenticated code…Critical Security Flaw Found In JetBrains TeamC…
New findings show that malicious actors could leverage a sneaky malware detection evasion technique and bypass endpoint security solutions by manipulating the …
The White House launched a multimillion-dollar cyber contest to use artificial intelligence (AI) to detect and fix security vulnerabilities in the U.S. governm…
A new malware campaign has been observed making use of malicious OpenBullet configuration files to target inexperienced cyber criminals with the goal of delive…
Red Hat OpenShift Container Platform release 4.10.62 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat P…
In what's a new kind of software supply chain attack aimed at open source projects, it has emerged that threat actors could seize control of expired Amazon S3 …
Red Hat OpenShift Container Platform release 4.13.3 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Pr…
Microsoft has shared details of a now-patched flaw in Apple macOS that could be abused by threat actors with root access to bypass security enforcements and pe…
