Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The python-rdflib-tools package (tools for converting to and from RDF) had wrappers that could load Python modules from the current working directory, allowing…
Updated chromium-browser-stable packages fix security vulnerabilities. The chromium-browser-stable package has been updated to 96.0.4664.110 version that fixes…
Web infrastructure company Cloudflare on Wednesday revealed that threat actors are actively attempting to exploit asecond bugdisclosed in the widely used Log4j…
Microsoft has rolled outPatch Tuesday updatesto address multiple security vulnerabilities in Windows and other software, including one actively exploited flaw …
The Apache Software Foundation has released fixes to contain anactivelyexploitedzero-day vulnerability affecting the widely-used Apache Log4j Java-based loggin…
Reportedly, a new malware, identified as 'Tardigrade,' is actively targeting the biomanufacturing sector. The threat…Threat Actors Used Tardigrade Malware In A…
A new malware loader is active in the wild, targeting users with RATs and infostealers.…New RATDispenser JavaScript Loader Delivers Infostealers To Pilfer Pass…
An advanced persistent threat (APT) has been linked to cyberattacks on two biomanufacturing companies that occurred this year with the help of a custom malware…
In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of . or an empty filename. Th…
FBI has recently warned users of an actively exploited zero-day vulnerability in FatPipe SD-WAN products.…FBI Issued Flash Alert For FatPipe Zero-Day Bug Under…
A new banking trojan is actively targeting Android users in Brazil. Researchers have identified this…BrazKing Android Malware Evolves Into A Potent Banking Tro…
Lazarus, the North Korea-affiliated state-sponsored group, is attempting to once again target security researchers with backdoors and remote access trojans usi…
Security is becoming an increasingly key piece of the open source puzzle amid industry-wide pushes to shift left and integrate security during early stages of …
Cybersecurity researchers on Friday disclosed a now-patched critical vulnerability in multiple versions of a time and billing system called BillQuick that's be…
Red Hat Directory Server 11.4 is now available. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scori…
The Russian-led REvil ransomware gang was felled by an active multi-country law enforcement operation that resulted in its infrastructure being hacked andÂtake…
Tenable discovered that in Babel, a set of tools for internationalizing Python applications, Babel.Locale allows attackers to load arbitrary locale .dat files …
Richard Weinberger reported that unsquashfs in squashfs-tools, the tools to create and extract Squashfs filesystems, does not check for duplicate filenames wit…
As many as 130 different ransomware families have been found to be active in 2020 and the first half of 2021, with Israel, South Korea, Vietnam, China, Singapo…
Introduction A path traversal attack (also known as directory traversing) aims to gain access to…Navigating Path Traversal Vulnerabilities in Java Application…
Fix additional write outside destination directory exploit ---- 4.5 release (includes security fix for CVE-2021-40153)
The operators behind the BlackRock mobile malware have surfaced back with a new Android banking trojan calledÂERMACÂthat targets Poland and has its roots in th…
Cybersecurity researchers have charted the evolution of Jupyter, a .NET infostealer known for singling out healthcare and education sectors, which make it exce…
Google on Monday released security updates for Chrome web browser to address a total of 11 security issues, two of which it says are actively exploited zero-da…
