Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An ongoing mobile spyware campaign has been uncovered snooping on South Korean residents using a family of 23 malicious Android apps to siphon sensitive inform…
The Internet Security Research Group (ISRG) 's new Prossimo project seeks to make many basic internet programs and protocols memory-safe by rewriting them in R…
Cybersecurity researchers on Tuesday disclosed 14 critical vulnerabilities in the BusyBox Linux utility that could be exploited to result in a denial-of-servic…
Several vulnerabilities have been discovered in the OpenJDK Java runtime, including issues with cyprographic hashing, TLS client handshaking, and various other…
No business is out of danger of cyberattacks today. However, specific industries are particularly at risk and a favorite of attackers. For years, the healthcar…
Another cryptocurrency platform has suffered a cyber attack. The latest victim of the crypto heist…bZx DeFi Platform Lost $55 Million Stolen In The Latest Cryp…
A flaw was discovered in containerd, an open and reliable container runtime. Insufficiently restricted permissions on container root and plugin directories cou…
The binary got built with Fedora mandatory compiler flags.
This update upgrades Thunderbird to version 91.3.0. * Mozilla: Use-after-free in HTTP2 Session object * Mozilla: Memory safety bugs fixed in Firefox 94 and Fir…
This update upgrades Firefox to version 91.3.0 ESR. * Mozilla: Use-after-free in HTTP2 Session object * Mozilla: Memory safety bugs fixed in Firefox 94 and Fir…
Computer systems, software, applications, and other network interfaces are vulnerable to various threats. Failure to find these vulnerabilities can lead to the…
**PHP version 8.0.12** (21 Oct 2021) **CLI:** * Fixed bug php#81496 (Server logs incorrect request method). (lauri) **Core:** * Fixed bug php#81435 (Observer c…
Linux and FreeBSD variants of the Hive ransomware have recently been discovered, demonstrating how threat actors are increasingly targeting other OSes besides …
flatpak: Sandbox bypass via recent VFS-manipulating syscalls (CVE-2021-41133) For more details about the security issue(s), including the impact, a CVSS score,…
CVE-2021-25219 Kishore Kumar Kothapalli discovered that the lame server cache in BIND, a DNS server implementation, can be abused by an attacker to
WordPress admins have to deal with another vulnerable WordPress plugin that poses a highly severe…HashThemes Demo Importer Plugin Bug Could Allow Wiping WordPr…
The cryptocurrency exchange Cream Finance got hacked again to lose millions to the attacker. As…Cream Finance Crypto Exchange Hacked Again Losing $130 Million …
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitr…
Updated php packages fix security vulnerability: In PHP versions 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and…
Several security vulnerabilities have been discovered in OpenCV, the Open Computer Vision Library. Buffer overflows, NULL pointer dereferences and out-of-bound…
PCI devices with RMRRs not deassigned correctly [XSA-386, CVE-2021-28702]
https://www.mediawiki.org/wiki/Release_notes/1.36#MediaWiki_1.36.2
**Redis 6.2.** - 6 Released Mon Oct 4 12:00:00 IDT 2021 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: * (**CVE-2021-41099**) In…
FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c, which allows a remote malicious user to cause a Denial of Service. (CVE-2020-20446) F…
