Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not properly sanitize HTML messages. This would allow an attack…
https://www.mediawiki.org/wiki/Release_notes/1.36#MediaWiki_1.36.3
Add wayland detection and pass flags to improve experience when wayland is used. ---- Update to 96.0.4664.110. You know the drill, lots of security bugs fixed,…
When I want to know the most recently published best practices in cyber security, I visit The National Institute of Standards and Technology (NIST). From the l…
An ongoingZLoadermalware campaign has been uncovered exploiting remote monitoring tools and a nine-year-old flaw concerning Microsoft's digital signature verif…
Update to version 0.0.95.1. Fixes security issue: https://github.com/quotient- im/Quaternion/issues/789
Update to version 0.0.95.1. Fixes security issue: https://github.com/quotient- im/Quaternion/issues/789
Past security updates of Salt, a remote execution manager, introduced regressions for which follow-up fixes were published: CVE 2020-16846 regression
In May 2017, the first documented ransomware assault on networked medical equipment happened. The worldwide ransomware assault WannaCry compromised radiologica…
Several wireshark vulnerabilities have been fixed. See the release notes for details. References: - https://bugs.mageia.org/show_bug.cgi?id=29832
xwayland 21.1.4 Security fix for CVE-2021-4008, CVE-2021-4009, CVE-2021-4010, CVE-2021-4011 Store EGLcontext to avoid superfluous eglMakeCurrent() calls Prefer…
e2guardian did not validate TLS hostnames (CVE-2021-44273) References: - https://bugs.mageia.org/show_bug.cgi?id=29811 - https://www.openwall.com/lists/oss-sec…
While it's come a long way over the past year, Kubernetes security has not yet reached maturity. But judging from the level of investment in 2021 into technolo…
This kernel-linus update is based on upstream 5.15.11 and fixes atleast the following security issues: Potentially malicious XEN PV backends can cause guest Do…
This kernel update is based on upstream 5.15.11 and fixes atleast the following security issues: Potentially malicious XEN PV backends can cause guest DoS due …
In ruby-haml, which is an elegant, structured XHTML/XML templating engine, when using user input to perform tasks on the server, characters like " ' must be es…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
A short-lived phishing campaign has been observed taking advantage of a novel exploit that bypassed a patch put in place by Microsoft to fix a remote code exec…
Linux and open-source software will be hotter than ever, but the real changes will be in how they're secured.
A couple of vulnerabilites were found in paramiko, an implementation of SSHv2 protocol in Python. CVE-2018-1000805
An XSS vulnerability was discovered in noVNC, a HTML5 VNC client, in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the me…
An issue has been found in libzip, a library for reading, creating, and modifying zip archives. Crafted ZIP archives could allow remote attackers to cause deni…
Peter Parker might not be a mastermind cryptocurrency criminal, but the name Spiderman is quickly becoming more associated with the mining landscape.ReasonLabs…
Apple recently fixed a security vulnerability in the macOS operating system that could be potentially exploited by a threat actor to "trivially and reliably" b…
