Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An issue was discovered in TCPDF before 6.8.0. setSVGStyles does not sanitize the SVG font-family attribute. (CVE-2024-56519) An issue was discovered in TCPDF …
As online scams increase, Microsoft takes a huge step in protecting its users from scams.…Microsoft Rolls Out AI-Powered Scareware Blocker In Edge Browser on L…
A subgroup within the infamous Russian state-sponsored hacking group known as Sandworm has been attributed to a multi-year initial access operation dubbed BadP…
Cybersecurity researchers have discovered a bypass for a now-patched security vulnerability in the NVIDIA Container Toolkit that could be exploited to break ou…
BlueZ could be made to crash or run programs as your login if it received specially crafted Bluetooth requests.
Remote Code Execution in pypa/setuptools. (CVE-2024-6345) References: - https://bugs.mageia.org/show_bug.cgi?id=33536 - https://lists.suse.com/pipermail/sle-up…
A regression was identified in rexml gem. A corner case of XML namespace default namespace was not handled correctly, and thus rexml failed to parse valid XML …
Threat actors have observed the increasingly common ClickFix technique to deliver a remote access trojan named NetSupport RAT since early January 2025.NetSuppo…
Source: The NationA coordinated law enforcement operation has taken down the dark web data leak and negotiation sites associated with the 8Base ransomware gang…
A vulnerability has been discovered in rust-openssl, a set of OpenSSL bindings for the Rust programming language. In affected versions ssl::select_next_proto c…
Supply chains have become increasingly complex and interconnected, leading to new vulnerabilities that businesses cannot…Why Modern Businesses Need Supply Chai…
In a startling revelation, researchers have uncovered a critical vulnerability in the Linux kernel that has remained undetected for seven years, posing a signi…
In a startling revelation, researchers have uncovered a critical vulnerability in the Linux kernel that has remained undetected for seven years, posing a signi…
Threat actors have been observed targeting Internet Information Services (IIS) servers in Asia as part of a search engine optimization (SEO) manipulation campa…
Update to 20240116.3 Fix potential integer overflow in hash container create/resize
Vulnerabilities were found in sssd, a set of daemons to manage access to remote directories and authentication mechanisms, which could lead to privilege escala…
Add code to deal with sched_setattr() not being exported in glibc 2.41 Address CVE-2024-54159 denial of services via symlink attack
New ASPA support is now always compiled in and available if enable-aspa is set. The aspa Cargo feature has been removed. (#990) If merging mutliple ASPA object…
When an input DER data contains a large number of SEQUENCE OF or SET OF elements, decoding the data and searching a specific element in it take quadratic time …
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that a security flaw impacting Trimble Cityworks GIS-centric asset management softw…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that a security flaw impacting Trimble Cityworks GIS-centric asset management softw…
Tails, the amnesic incognito live system renowned for its privacy and security measures, has just released version 6.12 , bringing crucial updates and fixes yo…
Bogus websites advertising Google Chrome have been used to distribute malicious installers for a remote access trojan called ValleyRAT.The malware, first detec…
