Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The Cloud Native Computing Foundation (CNCF) early this month in Seattle hosted the first standalone CloudNativeSecurityCon (CNSCon) North America 2023 . The e…
CVE-2023-0494: potential use-after-free in DeepCopyPointerClasses
Samsung recently announced a new security feature to protect its users from cyber threats. Named…Samsung Launches Message Guard To Prevent Zero-Click Attacks o…
Secure Sockets Layer (SSL) is an internet security protocol. It establishes encrypted connections between computers on a network, such as the internet. The Ope…
Multiple security issues were discovered in Sox, the Swiss Army knife of sound processing programs, which could result in denial of service or potentially the …
This update upgrades Thunderbird to version 102.8.0. * Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767) * Mozilla: Content security policy le…
This update upgrades Firefox to version 102.8.0 ESR. * Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767) * Mozilla: Content security policy le…
Cisco has rolled out security updates to address a critical flaw reported in the ClamAV open source antivirus engine that could lead to remote code execution o…
Update to 102.8.0 ; https://www.mozilla.org/en- US/security/advisories/mfsa2023-07/ ; https://www.thunderbird.net/en- US/thunderbird/102.8.0/releasenotes/
ClamAV 0.103.8 is a critical patch release with the following fixes: * CVE-2023-20032 : Fixed a possible remote code execution vulnerability in the HFS+ file p…
runc, as used in Docker and other products, allows AppArmor and SELinux restriction bypass, and thus a malicious Docker image could breach isolation.
Multiple security vulnerabilities were discovered in snort, a flexible Network Intrusion Detection System, which could allow an unauthenticated, remote attacke…
Suspected North Korean nation-state actors targeted a journalist in South Korea with a malware-laced Android app as part of a social engineering campaign.The f…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
Security teams typically have great visibility over most areas, for example, the corporate network, endpoints, servers, and cloud infrastructure. They use this…
More than 500 hosts have been newly compromised en masse by the ESXiArgs ransomware strain, most of which are located in France, Germany, the Netherlands, the …
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
The demand for cyber security professionals is on the rise as the need to protect…Exploring the Top Cyber Security Career Options: From Ethical Hacking to Digi…
Tss2_RC_SetHandler and Tss2_RC_Decode both index into layer_handler with an 8 bit layer number, but the array only has TPM2_ERROR_TSS2_RC_LAYER_COUNT entries, …
JBoss EAP XP 4.0.0.GA Security release on the EAP 7.4.9 base. See references for release notes. Red Hat Product Security has rated this update as having a secu…
Last week, we wrote about a bunch of memory management bugs that were fixed in the latest security update of the popular OpenSSL encryption library. Along with…
Malicious actors have published more than 451 unique Python packages on the official Python Package Index (PyPI) repository in an attempt to infect developer s…
In just six months, the OpenWallet Foundation (OWF) has grown from three to 350 global organizations, including trillion-dollar companies, which intend to coll…
CVE-2023-0494: potential use-after-free in DeepCopyPointerClasses
