Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Researchers discovered a new Android malware, “Snowblind”, running active campaigns since early 2024. This malware…New Snowblind Android Malware Emerges As A P…
Installers for three different software products developed by an Indian company named Conceptworld have been trojanized to distribute information-stealing malw…
Gunicorn, an event-based HTTP/WSGI server, fails to properly validate Transfer- Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By c…
TeamViewer on Thursday disclosed it detected an "irregularity" in its internal corporate IT environment on June 26, 2024."We immediately activated our response…
Heap Buffer Overflow in the erofsfsck_dirent_iter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted e…
The 6.9.6 stable kernel update contains a number of important fixes across the tree.
Recent security updates for Ubuntu and Debian have been released to address vulnerabilities in Thunderbird, the popular open-source mail and newsgroup client, …
OpenSSL could be made to consume resources and cause long delays if it processed certain input.
Ruby could be made to crash or expose sensitive information login if it processed certain strings.
A newly disclosed critical security flaw impacting Progress Software MOVEit Transfer is already seeing exploitation attempts in the wild shortly after details …
Threat actors are exploiting a novel attack technique in the wild that leverages specially crafted management saved console (MSC) files to gain full code execu…
Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting T…
The update for composer released as DSA 5715 introduced a regression in the handling of git feature branches. Updated composer packages are now available to ad…
In the ever-evolving cybersecurity landscape, a new concern has come to light for Linux admins''a claimed zero-day vulnerability for Local Privilege Escalation…
New emacs packages are available for Slackware 15.0 and -current to fix a security issue.
Russian organizations have been targeted by a cybercrime gang called ExCobalt using a previously unknown Golang-based backdoor known as GoRed."ExCobalt focuses…
The CIA triad '' no relation to the Central Intelligence Agency '' is an information security framework for protecting information. It examines the confidentia…
Update to 2.44.2: Make gamepads visible on axis movements, and not only on button presses. Disable the gst-libav AAC decoder. Make user scripts and style sheet…
The U.S. Department of Commerce's Bureau of Industry and Security (BIS) on Thursday announced a "first of its kind" ban that prohibits Kaspersky Lab's U.S. sub…
Cybersecurity researchers have disclosed details of a now-patched security flaw in Phoenix SecureCore UEFI firmware that affects multiple families of Intel Cor…
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fi…
Are your tags really safe with Google Tag Manager? If you've been thinking that using GTM means that your tracking tags and pixels are safely managed, then it …
Chinese-speaking users are the target of a never-before-seen threat activity cluster codenamed Void Arachne that employs malicious Windows Installer (MSI) file…
Huy Nguy¡»'n Ph¡º¡m Nh¡ºt, and Valentin T. and Lutz Wolf of CrowdStrike, discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, …
