Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The advanced persistent threat (APT) group known as UAC-0063 has been observed leveraging legitimate documents obtained by infiltrating one victim to attack an…
Update to 20240722.1 Fix potential integer overflow in hash container create/resize
Several security vulnerabilities have been discovered in iperf3, an internet protocol bandwidth measuring tool, which may lead to a denial-of-service. When ipe…
A financially motivated threat actor has been linked to an ongoing phishing email campaign that has been ongoing since at least July 2024 specifically targetin…
Welcome to your weekly cybersecurity scoop! Ever thought about how the same AI meant to protect our hospitals could also compromise them? This week, we’re brea…
A previously unknown threat actor has been observed copying the tradecraft associated with the Kremlin-aligned Gamaredon hacking group in its cyber attacks tar…
When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and siz…
A group of academics has disclosed details of over 100 security vulnerabilities impacting LTE and 5G implementations that could be exploited by an attacker to …
It was discovered that there was potential Denial of Service (DoS) vulnerability in Django, the Python-based web development framework. The lack of upper-bound…
Enterprise-grade Juniper Networks routers have become the target of a custom backdoor as part of a campaign dubbed J-magic.According to the Black Lotus Labs te…
An analysis of HellCat and Morpheus ransomware operations has revealed that affiliates associated with the respective cybercrime entities are using identical c…
Archinstall 3.0.2 has just been released, and it brings a host of updates and improvements that Linux security admins will want to note. This latest version of…
Google on Wednesday shed light on a financially motivated threat actor named TRIPLESTRENGTH for its opportunistic targeting of cloud environments for cryptojac…
Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …
Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …
Lot of CVEs were fixed by upstream since our current version; please see the links. References: - https://bugs.mageia.org/show_bug.cgi?id=33609
BlueZ could be made to run programs as an administrator if it connected to a malicious Bluetooth device.
CVE-2024-53263 When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the `git-credential(1)` command
AlmaLinux 10 beta has arrived with exciting features designed to increase system security and streamline configuration management. This latest release introduc…
It was discovered that there was a potential command-injection vulnerability was discovered in ucf, a tool to preserve user changes to config files.
As organizations look to modernize their applications and increase performance, .NET Core can be a pivotal shift from the .NET Framework. It is the perfect pla…
Recent data breaches have highlighted the critical need to improve guest Wi-Fi infrastructure security in modern business environments. Organizations face incr…
Threat actors have been observed concealing malicious code in images to deliver malware such as VIP Keylogger and 0bj3ctivity Stealer as part of separate campa…
As the backbone of much of the world's technological infrastructure, the open-source community prides itself on transparency, collaboration, and innovation . H…
