Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The Apache Software Foundation (ASF) has released a security update to address an important vulnerability in its Tomcat server software that could result in re…
XStream is a simple java library to serialize objects to XML and back again. Two vulnerabilities were fixed: CVE-2021-43859:
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
In recent months, serious vulnerabilities have been discovered in widely used TP-Link routers including Archer and Deco models . These flaws, CVE-2024-21833 an…
A now-patched critical security flaw impacting Fortinet FortiClient EMS is being exploited by malicious actors as part of a cyber campaign that installed remot…
We Linux security admins have a new challenge on our hands: it was recently discovered that Qualcomm Snapdragon X Plus and Elite processors - found in laptops,…
BeyondTrust has disclosed details of a critical security flaw in Privileged Remote Access (PRA) and Remote Support (RS) products that could potentially lead to…
A buffer overflow was discovered in the vhost code of DPDK, a set of libraries for fast packet processing, which could result in denial of service or the execu…
We Linux security admins have a new challenge on our hands: several Qualcomm processors/SoCs are still vulnerable to Spectre-related attacks . Despite its prom…
Bogus software update lures are being used by threat actors to deliver a new stealer malware called CoinLurker."Written in Go, CoinLurker employs cutting-edge …
We Linux security admins have a new challenge on our hands: several Qualcomm processors/SoCs are still vulnerable to Spectre-related attacks . Despite its prom…
This release contains a fix for a security issue: CVE-2024-46901 See https://subversion.apache.org/security/CVE-2024-46901-advisory.txt for more information. C…
An update that fixes one vulnerability is now available.
A now-removed GitHub repository that advertised a WordPress tool to publish posts to the online content management system (CMS) is estimated to have enabled th…
Game hacking has become a pervasive issue in the gaming industry, testing notions of fairness and redefining how gamers engage with their favorite titles. Desp…
Microsoft closed out its Patch Tuesday updates for 2024 with fixes for a total of 72 security flaws spanning its software portfolio, including one that it said…
Users of Cleo-managed file transfer software are being urged to ensure that their instances are not exposed to the internet following reports of mass exploitat…
A type confusion vulnerability within the Linux Kernel's nftables subsystem - CVE-2024-42070 - was recently discovered, requiring urgent mitigation through ker…
Vulnerability Management (VM) has long been a cornerstone of organizational cybersecurity. Nearly as old as the discipline of cybersecurity itself, it aims to …
A joint advisory issued by Australia, Canada, New Zealand, and the U.S. has warned of a broad cyber espionage campaign undertaken by People's Republic of China…
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access…
An update that fixes two vulnerabilities is now available.
An issue has been found in xfpt, a tool to generate XML from plain tex. The issue is about bad handling of input data, which may result in a stack-based buffer…
