Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Buffer overflow vulnerabilities have long been one of the biggest headaches in computer security, especially on Linux operating systems that power everything f…
Soon after patching over three dozen vulnerabilities, including a zero-day, in Chrome, Google identifies another…Google Confirmed A Now-Patched Chrome Vulnerab…
The most dangerous vulnerability you’ve never heard of.In the world of cybersecurity, vulnerabilities are discovered so often, and at such a high rate, that it…
Multiple security issues were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which could result in denial of service and potentially the execut…
Attackers are increasingly using new phishing toolkits (open-source, commercial, and criminal) to execute adversary-in-the-middle (AitM) attacks.AitM enables a…
Fortra has addressed a critical security flaw impacting FileCatalyst Workflow that could be abused by a remote attacker to gain administrative access.The vulne…
The threat actors behind the BlackByte ransomware group have been observed likely exploiting a recently patched security flaw impacting VMware ESXi hypervisors…
It was discovered that there was a sanitisation bypass issue in python-html-sanitizer, a library used ensure that user-specified content cannot inject HTML or …
Cybersecurity researchers have uncovered a new stealthy piece of Linux malware that leverages an unconventional technique to achieve persistence on infected sy…
As many as 15,000 applications using Amazon Web Services' (AWS) Application Load Balancer (ALB) for authentication are potentially susceptible to a configurati…
As many as 15,000 applications using Amazon Web Services' (AWS) Application Load Balancer (ALB) for authentication are potentially susceptible to a configurati…
A new remote access trojan called MoonPeak has been discovered as being used by a state-sponsored North Korean threat activity cluster as part of a new campaig…
An integer overflow was discovered in aom, the AV1 Video Codec Library, which could potentially result in the execution of arbitrary code if a malformed media …
A maximum-severity security flaw has been disclosed in the WordPress GiveWP donation and fundraising plugin that exposes more than 100,000 websites to remote c…
A previously undocumented backdoor named Msupedge has been put to use against a cyber attack targeting an unnamed university in Taiwan."The most notable featur…
Security researchers have spotted a new vulnerability that has been affecting Google Pixel devices for…Google Pixel Devices Found Vulnerable Due To Pre-Install…
Malicious actors are using a cloud attack tool named Xeon Sender to conduct SMS phishing and spam campaigns on a large scale by abusing legitimate services."At…
SaaS applications have become indispensable for organizations aiming to enhance productivity and streamline operations. However, the convenience and efficiency…
Update to 115.14.0 https://www.thunderbird.net/en-US/thunderbird/115.14.0esr/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2024-38/
A cybercrime group with links to the RansomHub ransomware has been observed using a new tool designed to terminate endpoint detection and response (EDR) softwa…
Simply relying on traditional password security measures is no longer sufficient. When it comes to protecting your organization from credential-based attacks, …
The China-backed threat actor known as Earth Baku has diversified its targeting footprint beyond the Indo-Pacific region to include Europe, the Middle East, an…
dotnet8 could be made to disclose sensitive information.
Russia has seemingly taken another step towards restricting its citizens’ online freedom as it blocks…Russia Blocks Signal App Citing Violation Of Laws on Late…
