Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An out-of-bounds write was discovered in Thunderbird, which could be triggered via a malformed email message. For the oldstable distribution (buster), this pro…
Crafted email could trigger an out-of-bounds write. (CVE-2022-0566) References: - https://bugs.mageia.org/show_bug.cgi?id=30055 - https://www.thunderbird.net/e…
Researchers have found active phishing campaigns exploiting a zero-day vulnerability in the Zimbra email platform.…Researchers Found Zimbra Zero-Day XSS Vulner…
Cybersecurity researchers have turned the spotlight on a new wave of offensive cyberattacks targeting Palestinian activists and entities starting around Octobe…
Microsoft has disclosed details of a large-scale, multi-phase phishing campaign that uses stolen credentials to register devices on a victim's network to furth…
A new, sophisticated phishing attack has been observed delivering the AsyncRAT trojan as part of a malware campaign that's believed to have commenced in Septem…
The operators behind the BlackRock mobile malware have surfaced back with a new Android banking trojan calledÂERMACÂthat targets Poland and has its roots in th…
Cybersecurity researchers on Tuesday disclosed details of an unpatched zero-day vulnerability in macOS Finder that could be abused by remote adversaries to tri…
A spam campaign delivering spear-phishing emails aimed at South American organizations has retooled its techniques to include a wide range of commodity remote …
McDonald's recently made a blunder when sending emails to prize winners. What McDonald's now confirmed…McDonald’s Erroneously Leaked Credentials to Monopoly VI…
Kevin Israel discovered that Postorius, the administrative web frontend for Mailman 3, didn't validate whether a logged-in user owns the email address when uns…
The U.S. government and its key allies, including the European Union, the U.K., and NATO, formally attributed the massive cyberattack against Microsoft Exchang…
As ransomware attacks against critical infrastructure skyrocket, new research shows that threat actors behind such disruptions are increasingly shifting from u…
Microsoft on Thursday warned of a "massive email campaign" that's pushing a Java-based STRRAT malware to steal confidential data from infected systems while di…
The Qualys Research Team has discovered multiple critical vulnerabilities in the popular Exim mail server , which they have named 21Nails . Some of these flaws…
Cybersecurity researchers on Monday disclosed a new malspam campaign distributing a fresh variant of a malware loader called "Buer" written in Rust, illustrati…
DigitalOCean confirmed the data breach via an email to its customers confirming the exposure of…DigitalOcean Data Breach Exposed Customers' Billing Information…
SonicWall has recently fixed three zero-day bugs affecting its Email Security products. Though the patches…Three SonicWall Zero-Day Bugs Under Active Attack ' …
Emotet, the notorious email-based Windows malware behind several botnet-driven spam campaigns and ransomware attacks, was automatically wiped from infected com…
This update upgrades Thunderbird to version 78.9.1. * Mozilla: An attacker may use Thunderbird's OpenPGP key refresh mechanism to poison an existing key (CVE-2…
A vulnerability in the email parsing module in Clam AntiVirus (ClamAV) Software version 0.103.1 and all prior versions could allow an unauthenticated, remote a…
Cybersecurity researchers have unwrapped an "interesting email campaign" undertaken by a threat actor that has taken to distributing a new malware written inÂN…
In what's a case of hackers getting hacked, a prominent underground online criminal forum by the name of Maza has been compromised by unknown attackers, making…
Most cybersecurity professionals fully anticipated that cybercriminals would leverage the fear and confusion surrounding the Covid-19 pandemic in their cyberat…
