Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Today's CISOs operate in an overly intensive environment.As the ones who are tasked with the unenviable accountability for failed protection and successful bre…
After releasing a patch for a critical zero-day remote code execution vulnerability late last month, vBulletin has recently published a new security patch upda…
In lib/mini_magick/image.rb in ruby-mini-magick, a fetched remote image filename could cause remote command execution because Image.open input is directly pass…
It was discovered that jackson-databind, a Java library used to parse JSON and other data formats, did not properly validate user input before attempting deser…
Almost every application contains security vulnerabilities, some of which you may find today, but others would remain invisible until someone else finds and ex…
Another day, another revelation of a critical unpatched zero-day vulnerability, this time in the world's most widely used mobile operating system, Android.What…
Updated thunderbird packages fix security vulnerability: Spoofing a message author via a crafted S/MIME message (CVE-2019-11755) It also fixes various other …
patch: do_ed_script in pch.c does not block strings beginning with a ! character (CVE-2018-20969) * patch: OS shell command injection when processing crafted p…
You know about that one, much-hemmed-and-hawed-over, GDPR-ish, national, US privacy law? The one we dont have? The lack of which means the country's data priva…
This is the Six-Month notification for the retirement of Red Hat Enterprise Linux 5.9 Advanced Mission Critical (AMC). This notification applies only to those …
The greatest threat facing most nations is no longer a standing army. It's a hacker with a computer who can launch a crippling cyber attack from thousands of m…
A buffer overflow flaw was discovered in Exim, a mail transport agent. A remote attacker can take advantage of this flaw to cause a denial of service, or poten…
It's not a Patch Tuesday, but Microsoft is rolling out emergency out-of-band security patches for two new vulnerabilities, one of which is a critical Internet …
The world of connected consumer electronics, IoT, and smart devices is growing faster than ever with tens of billions of connected devices streaming and sharin…
It's Patch Tuesday again'the day of the month when both Adobe and Microsoft release security patches for vulnerabilities in their software.Adobe has just relea…
Many people worry that quantum computers will be able to crack certain codes used to send secure messages. The codes in question encrypt data using trapdoor" m…
The ransomware attacks in Baltimore and other US cities appear to have a common thread: they're using NSA tools on the agency's home soil. In-the-know security…
A Chinese woman was arrested for sneaking into Trump's "Winter White House," a reminder of how exposed the president's private club is to physical and cybersec…
Cheap computers for the world's poor could mean big security headaches. The $100 One Laptop Per Child (OLPC) project is inviting hackers to break test out and …
As reported by a subscriber to the incidents mailing list at . "It appears that perhaps tens of thousands of username/passwords for valid shell logins ALL ACRO…
Steve Gibson recounts the steps he took to stop his attack from being subjected to a distributed denial of service attack. "I believe you will be as fascinated…
Here's a short editorial on fractal encryption. "A fractally encrypted message cannot be broken even by the senders. It is so secure as to be that way for it's…
"BEIJING -- China has eased tough new restrictions on encryption technology, announcing that a vast category of consumer software and equipment -- including mo…
"Open-source based software solutions provider TurboLinux on Tuesday announced that its server product has been deployed, along with a cluster of IBM Netfinity…
