Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
It was discovered that exo, a support library for the Xfce desktop environment, would allow executing remote .desktop files. In some scenario, an attacker coul…
It was discovered that BlueZ incorrectly validated certain capabilities and lengths when handling the A2DP profile. A remote attacker could use this issue to c…
Update to 2.36.3: * Support capturing already encoded video streams, which takes advantage of encoding done in hardware by devices which support this feature. …
Windows and Linux systems are being targeted by a ransomware variant called HelloXD, with the infections also involving the deployment of a backdoor to facilit…
This fixes several issues, most notably BZ#1955416 and CVE-2022-28737. Please test.
This fixes several issues, most notably BZ#1955416 and CVE-2022-28737. Please test.
This fixes several issues, most notably BZ#1955416 and CVE-2022-28737. Please test.
crypto/tls: session tickets lack random ticket_age_add. Session tickets generated by crypto/tls did not contain a randomly generated ticket_age_add. This allow…
gzip: arbitrary-file-write vulnerability (CVE-2022-1271) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and…
Protect your Facebook Password Found this one while I was on Safari. Its a pretty…Facebook Account Bruteforcer on Latest Hacking News
cSploit is now considered EOL and is not being updated by the developers. Current version…cSploit - A Network Analyzer on Android on Latest Hacking News
This article will explore the key benefits and potential drawbacks of open source security in under a minute.
Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of these flaws for local root privilege …
python-twisted: possible http request smuggling (CVE-2022-24801) For more details about the security issue(s), including the impact, a CVSS score, acknowledgme…
It was discovered that the Debian package of Avahi, a framework for Multicast DNS Service Discovery, executed the script avahi-daemon-check-dns.sh with root pr…
The Tails project has announced the release of Tails 5.1. It comes with improvements to the Tor Connection assistant, the Unsafe Browser and captive portals, a…
A patch update (from 7.10.2 to 7.10.2.P1) is now available for Red Hat on OpenShift for EAP, Karaf, and Spring Boot. The purpose of this text-only errata is to…
Researchers discovered a security issue affecting Microsoft Office that could allow remote code execution attacks.…A Severe Zero-Day Vulnerability Riddles Micr…
An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The clie…
Update to 2.36.3: * Support capturing already encoded video streams, which takes advantage of encoding done in hardware by devices which support this feature. …
A malicious website could have learned the size of a cross-origin resource that supported Range requests (CVE-2022-31736). A malicious webpage could have cause…
Being able to improve your career in cyber security is something that can be hugely fulfilling, and there are a lot of great ideas you can use that will help y…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
Researchers have spotted a new browser hijacker in the wild, identified as “ChromeLoader” malware. This…ChromeLoader – A New Browser Hijacking Malware Spreadin…
