Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Cybersecurity agencies in Australia and the U.S. areÂwarningÂof an actively exploited vulnerability impacting ForgeRock's OpenAM access management solution tha…
A vulnerability in polkit could lead to local root privilege escalation.
PHPMailer contained a vulnerability that can result in untrusted code being called (CVE-2021-3603). See upstream release notes.
Popular online learning platform Coursera addressed a serious API vulnerability affecting potential students. Exploiting this…Coursera API Vulnerability Could …
Both public cloud and Open Source adoption has grown exponentially in recent years. What can we expect as we move towards the second half of 2021?
Whether you are a DevSecOps engineer responsible for managing your organization's application infrastructure or you have your own personal Linux server that yo…
A cyber-espionage group has been observed increasingly targeting Indian government personnel as part of a broad campaign to infect victims with as many as four…
A buffer overflow in ConnMan might allow remote attacker(s) to execute arbitrary code.
Multiple vulnerabilities have been found in Docker, the worst of which could result in privilege escalation to root on the host.
While it's a norm for phishing campaigns that distribute weaponized Microsoft Office documents to prompt victims to enable macros in order to trigger the infec…
An information disclosure vulnerability in InspIRCd may allow remote attackers to obtain sensitive information.
An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this vulnerability to …
The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications. The server part of pupnp (libupnp) appears to be vul…
This week, PrintNightmare - Microsoft's Print Spooler vulnerability (CVE-2021-34527) was upgraded from a 'Low' criticality to a 'Critical' criticality.This is …
linuxptp: missing length check of forwarded messages (CVE-2021-3570) For more details about the security issue(s), including the impact, a CVSS score, acknowle…
This `glibc` update re-enables `valgrind` suppression support for string functions. It addresses `valgrind` false positives on the aarch64 architecture in part…
Amidst the massiveÂsupply-chain ransomware attackÂthat triggered an infection chain compromising thousands of businesses on Friday, new details have emerged ab…
Multiple vulnerabillities have been found in Chromium and Google Chrome, the worst of which could allow remote attackers to execute arbitrary code. [More...]
A vulnerability in XStream, a Java library to serialize objects to and from XML, may allow a remote attacker to execute commands of the host only by manipulati…
An out-of-bounds read was discovered in the uv__idna_to_ascii() function of Libuv, an asynchronous event notification library, which could result in denial of …
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result an SSRF bypass of the FILTER_VALIDA…
Soon after its apparent departure, the notorious Babuk ransomware is once again back in action.…Babuk Ransomware Gang Is Back In Business With New Malware on L…
Fixes CVE-2021-3618 nginx: ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication
Fixes CVE-2021-3618 nginx: ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication
