Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
If you've been keeping up with security news, you may have noticed that it seems as if there have been an increasing number of attacks on Linux in recent years…
Progress Software on Thursdaydiscloseda third vulnerability impacting its MOVEit Transfer application, as the Cl0p cybercrime gang deployed extortion tactics a…
Ransomware actors and cryptocurrency scammers have joined nation-state actors in abusing cloud mining services to launder digital assets, new findings reveal."…
The threat actors behind theVidar malwarehave made changes to their backend infrastructure, indicating attempts to retool and conceal their online trail in res…
This update upgrades Firefox to version 102.12.0 ESR. * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414) * Mozilla: Memory …
This update upgrades Thunderbird to version 102.12.0. * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414) * Mozilla: Memory …
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitr…
Multiple security vulnerabilities have been discovered in vim, an enhanced vi editor. Buffer overflows and out-of-bounds reads may lead to a denial-of-service …
The term "attack surface management"(ASM) went from unknown to ubiquitous in the cybersecurity space over the past few years. Gartner and Forrester have both h…
A fully undetectable (FUD) malware obfuscation engine namedBatCloakis being used to deploy various malware strains since September 2022, while persistently eva…
python: urllib.parse url blocklisting bypass (CVE-2023-24329) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments…
python: urllib.parse url blocklisting bypass (CVE-2023-24329) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments…
Client 'session' cookie sent to other clients (CVE-2023-30861) References: - https://bugs.mageia.org/show_bug.cgi?id=31953 - https://lists.suse.com/pipermail/s…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
emacs: command injection vulnerability in htmlfontify.el (CVE-2022-48339) For more details about the security issue(s), including the impact, a CVSS score, ack…
IoT cybersecurity company Sternum has identified a security vulnerability affecting Zyxel Networks' Linux-operated NAS drives, including NAS326, NAS540, and NA…
Canonical began the development of Ubuntu Core in 2014, to create a fully-containerised platform for IoT. In Ubuntu Core, we use the same kernel container tech…
Threat actors associated with theCyclops ransomwarehave been observed offering an information stealer malware that's designed to capture sensitive data from in…
Researchers have noticed a weird backdoor-like behavior with Gigabyte systems that risks devices’ security. The…Researchers Observed Backdoor-Like Behavior In …
An analysis of the Linux variant of a new ransomware strain called BlackSuit has covered significant similarities with another ransomware family calledRoyal.Tr…
Data security is reinventing itself. As new data security posture management solutions come to market, organizations are increasingly recognizing the opportuni…
A critical flaw in Progress Software's in MOVEit Transfer managed file transfer application has come under widespread exploitation in the wild to take over vul…
An issue has been found in cups, the Common UNIX Printing System. Due to a buffer overflow vulnerability in the function format_log_line() a remote attackers c…
