Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
hivex: Buffer overflow when provided invalid node key length (CVE-2021-3504) For more details about the security issue(s), including the impact, a CVSS score, …
QEMU: ide: atapi: OOB access while processing read commands (CVE-2020-29443) For more details about the security issue(s), including the impact, a CVSS score, …
389-ds-base: information disclosure during the binding of a DN (CVE-2020-35518) For more details about the security issue(s), including the impact, a CVSS scor…
libwebp: heap-based buffer overflow in PutLE16() (CVE-2018-25011) * libwebp: heap-based buffer overflow in WebPDecode*Into functions (CVE-2020-36328) * libwebp…
Another report of a cyber attack surfaces online from the United States. The recent victim…Military Vehicle And Truck Maker Navistar Discloses Data Breach on L…
The updated package fixes security vulnerabilities: A heap buffer overflow read was discovered in upx 4.0.0, because the check in p_lx_elf.cpp is not perfect. …
Updated squid packages fix security vulnerabilities: Due to improper input validation Squid is vulnerable to an HTTP Request Smuggling attack. This problem all…
Fixed format string vulnerability allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file (CVE-2021-30145). References:…
Exponential entity expansion attack bypasses all existing protection mechanisms. (CVE-2021-3541). References: - https://bugs.mageia.org/show_bug.cgi?id=29039 -…
Malicious actors are actively mass scanning the internet for vulnerable VMware vCenter servers that are unpatched against a critical remote code execution flaw…
Researchers have disclosed significant security weaknesses in popular antivirus software applications that could be abused to deactivate their protections and …
It is predicted that 3.5 million jobs will be unfilled in the field of cybersecurity by the end of this year. Several of these jobs pay very well, and in most …
Another report of cyber-attack has surfaced online from the health sector. The recent victim is…Swedish Public Health Agency Disclosed Multiple Hacking Attempt…
It was discovered that lasso, a library which implements SAML 2.0 and Liberty Alliance standards, did not properly verify that all assertions in a SAML respons…
Major software vulnerabilities are a fact of life, as illustrated by the fact that Microsoft has patched between 55 and 110 vulnerabilities each month this yea…
Thank you to Oyelakin Timilehin Valentina and Duane Dunston for contributing this article.Threat intelligence (or threat intell) is information used to underst…
This update upgrades Firefox to version 78.11.0 ESR. * Mozilla: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11 (CVE-2021-29967) For more details …
Web apps provide ease to both businesses and customers, allowing enterprises to save money and…How to practice web automation for cybersecurity software? on La…
This advisory resolves CVE issues filed against XP1 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP1 code ba…
Another report of ransomware attack has surfaced online, this time targeting JBS Foods. The firm…Food Processing Giant JBS Foods Shut Down After Ransomware Att…
Amazon's experiment wireless mesh networking has turned users into guinea pigs. If you use Alexa, Echo, or any other Amazon device, you have only 10 days to op…
Looking for a free and secure CentOS replacement? AlmaLinux and Oracle are great alternatives you'll want to look into. Among the various benefits that the dis…
Are you aware of how secure your domain is? In most organizations, there is an assumption that their domains are secure and within a few months, but the truth …
Another major service has recently fallen prey to a third-party cybersecurity incident. The latest report…Canada Post Disclosed Data Breach Due To Third-Party …
