Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Cybersecurity researchers have discovered a new critical vulnerability (CVE-2020-7247) in the OpenSMTPD email server that could allow remote attackers to take …
Qualys discovered that the OpenSMTPD SMTP server performed insufficient validation of email addresses which could result in the execution of arbitrary commands…
PayPal has confirmed a bug in its website that could expose users' email addresses and passwords. Considering the seriousness ofBug Hunter Nets $15K Bounty For…
Simon Charette reported that the password reset functionality in Django, a high-level Python web development framework, uses a Unicode case-insensitive query t…
Another crypto exchange seemingly suffers a security incident. As evident from a recent email from Poloniex to the users, thePoloniex Crypto Exchange Discloses…
Russian law enforcement officers have raided the Moscow offices of Nginx'the company behind the world's second most popular web server software'over a copyrigh…
tnef release 1.4.18. [CVE-2019-18849](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18849) in which it may be possible to attack via a crafted email …
- Drop clamd@scan.service file (bz#1725810) ClamAV 0.101.5 is a security patch release that addresses the following issues. - CVE-2019-15961: A Denial-of-Se…
As part of its active efforts to protect billions of online users, Google identified and warned over 12,000 of its users who were targeted by a government-back…
Chinese smartphone maker OnePlus has suffered a new data breach exposing personal and order information of an undisclosed number of its customers, likely, as a…
Targeted ransomware attacks on banking and finance, government, healthcare, and critical infrastructure are on the rise, with the latest victim being the state…
Apache SpamAssassin celebrates its 18th birthday this year, a huge accomplishment for everyone who has contributed to the open-source project for nearly the pa…
The 'send_email' function in graphite-web/webapp/graphite/composer/views.py in Graphite is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an a…
After exposing private tweets, plaintext passwords, and personal information for hundreds of thousands of its users, here is a new security blunder social netw…
If you have been a subscriber of TOMS Shoes, you may have received a strange email. As revealed, a hackerHacker Makes Fun of TOMS Shoes By Sending Out Newslett…
Remember the critical remote code execution (RCE) vulnerability in the Exim email server, CVE-2019-15846,from mid-September? Barely two weeks later, and the so…
We already have witnessed the innovativeness of criminal hackers in exploiting various services to bait users. From regular email phishingScammers Exploit Goog…
Phishing attacks do not always involve emails or web links. Sometimes, the attackers also leverage the SMS facility to trickPolice Warn Of Scammers Targeting V…
Exim may be the Internet's most popular email server, but the MTA's recent history with security vulnerabilities is concerning to say the least. This past Frid…
