Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An installer for a tool likely used by the Russian Consular Department of the Ministry of Foreign Affairs (MID) has been backdoored to deliver a remote access …
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
A new malware dubbed ''Migo'' that is targeting Linux Redis servers to mine cryptocurrency via a cryptojacking attack has been discovered. This campaign employ…
Update to version 1.27.3. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.27.3 This update also addresses CVE-2023-49295 in quic-go: http…
Update to version 1.27.3. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.27.3 This update also addresses CVE-2023-49295 in quic-go: http…
A critical security flaw in the Bricks theme for WordPress is being actively exploited by threat actors to run arbitrary PHP code on susceptible installations.…
Another threat surfaces online for mobile phone users that targets Android and iOS devices alike.…New Gold Pickaxe Malware Aims To Steal Users’ Faces on Latest…
The Android banking trojan known as Anatsa has expanded its focus to include Slovakia, Slovenia, and Czechia as part of a new campaign observed in November 202…
Multiple vulnerabilities have been discovered in Samba, the worst of which can lead to remote code execution.
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution.
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.
Ubuntu and Fedora are two prominent Linux distributions, each offering its own set of strengths and features. Ubuntu, created by Canonical Ltd ., boasts a user…
Multiple vulnerabilities have been discovered in Exim, the worst of which can lead to remote code execution.
Multiple vulnerabilities have been discovered in Apache Log4j, the worst of which can lead to remote code execution.
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to remote code execution.
Fix CVE-2024-25580: potential buffer overflow when reading KTX images.
Update to 2.28.7 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.7 Security Advisories: https://mbed-tls.readthedocs.io/en/latest/securit…
The European Court of Human Rights (ECHR) has made a major decision , ruling that laws requiring weakened encryption and extensive data retention violate the E…
With breaches making the headlines on an almost weekly basis, the cybersecurity challenges we face are becoming visible not only to large enterprises, who have…
A malicious Python script known as SNS Sender is being advertised as a way for threat actors to send bulk smishing messages by abusing Amazon Web Services (AWS…
A Chinese-speaking threat actor codenamed GoldFactory has been attributed to the development of highly sophisticated banking trojans, including a previously un…
arm32: The cache may not be properly cleaned/invalidated (take two) [XSA-447, CVE-2023-46837] pci: phantom functions assigned to incorrect contexts [XSA-449, C…
Mate Kukri discovered the Debian build of EDK2, a UEFI firmware implementation, used an insecure default configuration which could result in Secure Boot bypass…
Nation-state actors associated with Russia, North Korea, Iran, and China are experimenting with artificial intelligence (AI) and large language models (LLMs) t…
