Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
AWS has patched a vulnerability in its Elastic Container Registry (ECR) that was uncovered by Lightspin researcher Gafnit Amiga during an examination of AWS's …
The Apache SpamAssassin project has released version 4.0.0 of its renowned open-source anti-spam platform with numerous tweaks and bug fixes and improved class…
Google on Friday announced that its client-side encryption for Gmail is in beta for Workspace and education customers as part of its efforts to secure emails s…
Samba has released software updates to remediate multiple vulnerabilities that, if successfully exploited, could allow an attacker to take control of affected …
Government entities in Ukraine have been breached as part of a new campaign that leveraged trojanized versions of Windows 10 installer files to conduct post-ex…
Reality has a way of asserting itself, irrespective of any personal or commercial choices we make, good or bad. For example, just recently, the city services o…
Jack Wallen takes a look at a new Linux distribution with a very unique and impressive way of employing security.
Microsoft on Thursday flagged a cross-platform botnet that's primarily designed to launch distributed denial-of-service (DDoS) attacks against private Minecraf…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasaddedtwo vulnerabilities impacting Veeam Backup & Replication software to its Known Exploit…
Researchers have identified that a massive 144,294 phishing-related packages have been uploaded by unknown threat actors on widely used open-source package rep…
A Chinese-speaking advanced persistent threat (APT) actor codenamedMirrorFacehas been attributed to a spear-phishing campaign targeting Japanese political esta…
Microsoft has revised the severity of a security vulnerability it originallypatched in September 2022, upgrading it to "Critical" after it emerged that it coul…
A previously undocumented Android malware campaign has been observed leveraging money-lending apps to blackmail victims into paying up with personal informatio…
Web applications, often in the form of Software as a Service (SaaS), are now the cornerstone for businesses all over the world. SaaS solutions have revolutioni…
NuGet, PyPi, and npm ecosystems are the target of a new campaign that has resulted in over 144,000 packages being published by unknown threat actors."The packa…
Phishing campaigns involving theQakbot malwareare using Scalable Vector Graphics (SVG) images embedded in HTML email attachments.The new distribution method wa…
Microsoft on Tuesday disclosed it took steps to implement blocking protections and suspend accounts that were used to publish malicious drivers that were certi…
Microsoft launched a preview of new server protection capabilities in its Defender for Business solution back in July. The company announced this week that thi…
In the cloud-native space, where applications are purpose built and delivered to run in the cloud, one technology in particular rises above all others '' Kuber…
While Linux does have a variety of security features to help make it safer, it's not impenetrable, which is why you need open-source tools to secure your Linux…
Tech giant Microsoft released its last set of monthly security updates for 2022 withfixes for 49 vulnerabilitiesacross its software products.Of the 49 bugs, si…
The U.S. National Security Agency (NSA) on Tuesdaysaida threat actor tracked as APT5 has been actively exploiting a zero-day flaw in Citrix Application Deliver…
Apple on Tuesday rolled out security updates to iOS, iPadOS, macOS, tvOS, and Safari web browser to address a new zero-day vulnerability that could result in t…
Google on Tuesday announced the open source availability ofOSV-Scanner, a scanner that aims to offer easy access to vulnerability information about various pro…
