Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The U.S. Senate unanimouslypassedthe "Strengthening American Cybersecurity Act" on Tuesday in an attempt to bolster the cybersecurity of critical infrastructur…
UPDATE: It's worth noting that the malware Microsoft tracks as FoxBlade is the same as the data wiper that's been denominated HermeticWiper (aka KillDisk).Micr…
The automotive giant Bridgestone Americas Inc. has recently suffered a cyberattack on its systems. Following…Bridgestone Americas At A Standstill After Facing …
It is predicted that 3.5 million jobs will be unfilled in the field of cybersecurity by the end of this year. Several of these jobs pay very well, and in most …
A previously undocumented espionage tool has been deployed against selected governments and other critical infrastructure targets as part of a long-running esp…
A new malware capable of controlling social media accounts is being distributed through Microsoft's official app store in the form of trojanized gaming apps, i…
It was discovered that the SQL plugin in cyrus-sasl2, a library implementing the Simple Authentication and Security Layer, is prone to a SQL injection attack. …
cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands (CVE-2022-24407) For more details about the security issu…
python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions (CVE-2022-22817) * python-pillow: buffer over-read during initialization of ImageP…
openldap: assertion failure in Certificate List syntax validation (CVE-2020-25709) * openldap: assertion failure in CSN normalization with invalid input (CVE-2…
As of early 2022, there’s one fact that cannot be stressed enough - we live…The Best Practices of Security Testing on Latest Hacking News
Several vulnerabilities have been discovered in Expat, an XML parsing C library, which could result in denial of service or potentially the execution of arbitr…
An investigation into the cyberattack targeting Iranian national media corporation, Islamic Republic of Iran Broadcasting (IRIB), in late January 2022 revealed…
There's a lot of FUD about how Linux is being shown recently to be less secure than proprietary systems. That's nonsense. But, now there are hard facts from Go…
Multiple security vulnerabilities have been disclosed in Canonical's Snap software packaging and deployment system, the most critical of which can be exploited…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Fridaypublisheda repository of free tools and services to enable organizations to mitigate,…
**phpMyAdmin 5.1.3** - 2022-02-11 This version primarily addresses a regression that caused the navigation pane to not function correctly when multiple pages o…
**phpMyAdmin 5.1.3** - 2022-02-11 This version primarily addresses a regression that caused the navigation pane to not function correctly when multiple pages o…
Update to 2.34.6: * Fix accessibility not working when the Bubblewrap sandbox is enabled. * Fix rendering of scrollbars when overlay scrollbars are disabled. *…
## 2022-02-08, Version 16.14.0 'Gallium' (LTS), @danielleadams ### Notable changes #### Importing JSON modules now requires experimental import assertions synt…
update to xen-4.14.4 ---- frontends vulnerable to backends [XSA-376] (document change only) arm: guest_physmap_remove_page not removing the p2m mappings [XSA-3…
A "potentially destructive actor" aligned with the government of Iran is actively exploiting the well-knownLog4j vulnerabilityto infect unpatched VMware Horizo…
It was discovered that zsh, a powerful shell and scripting language, did not prevent recursive prompt expansion. This would allow an attacker to execute arbitr…
The politically motivated Moses Staff hacker group has been observed using a custom multi-component toolset with the goal of carrying out espionage against its…
