Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Amir Sarabadani and Kunal Mehta discovered that the import functionality of Hyperkitty, the web user interface to access Mailman 3 archives, did not restrict t…
**Version 4.4.24** (2021-05-19) * security **CVE-2021-21424** [SecurityCore] Fix user enumeration via response body on invalid credentials (chalasr) * bug #412…
Luis Merino, Markus Vervier and Eric Sesterhenn discovered an off-by-one in Nginx, a high-performance web and reverse proxy server, which could result in denia…
Another data breach has surfaced online targeting Indian citizens shortly after the Air India breach.…Dominos India Admits Data Breach After Hackers Upload Sto…
Updated ceph packages fix security vulnerability on rgw CVE-2021-3524 (as well as CVE-2021-3509 and CVE-2021-3531 from which Mageia was not affected). Referenc…
Oracle has released Oracle Linux 8.4 as the latest (and greatest!) version of its free, enterprise-ready OS based on RHEL 8.4. This release offers improved sec…
Another victim of a ransomware attack has surfaced online. The latest target is the audio…Audio Tech Giant Bose Disclosed Ransomware Attack on Latest Hacking N…
A vulnerability in Nextcloud Desktop Client could allow a remote attacker to execute arbitrary commands.
Multiple vulnerabilities have been found in OpenSSH, the worst of which could allow a remote attacker to execute arbitrary code.
A buffer overflow in Boost might allow remote attacker(s) to execute arbitrary code.
Stunnel was not properly verifying TLS certificates, possibly allowing an integrity/confidentiality compromise.
There is a person in every organization that is the direct owner of breach protection. His or her task is to oversee and govern the process of design, build, m…
CloudLinux TuxCare Linux enterprise support services provide automated security patches and updates for the systems supporting the Atlas V rocket, supporting D…
Another threat for the online banking sector has surfaced online. Identified as Bizarro ' a…Bizarro Banking Trojan Targets Dozens Of Banks Across Europe, South…
Another corporate entity has disclosed a cybersecurity incident. The recent victim is the European packaging…Glass, Metal Products Producer Ardagh Group Suffer…
The adversary behind Conti ransomware targeted no fewer than 16 healthcare and first responder networks in the U.S. within the past year, totally victimizing o…
DarkSide, the hacker group behind theÂColonial Pipeline ransomware attackÂearlier this month, received $90 million in bitcoin payments following a nine-month r…
The updated packages fix security vulnerabilities: Thunderbird stored OpenPGP secret keys without master password protection (CVE-2021-29956).
There is a flaw in the opj2_compress program in openjpeg2. An attacker who is able to submit a large number of image files to be processed in a directory by op…
Canonical has released a new Linux kernel live patch for its Ubuntu 20.04 LTS and Ubuntu 18.04 LTS OS series to address a single security vulnerability in Linu…
ceph 16.2.4 GA notes=Security fix for CVE-2021-3524, CVE-2021-3531 ---- Ceph 16.2.3 GA
University of Minnesota researchers' recent "experiment" - which involved sneaking vulnerabilities into the Linux kernel code base and then effectively braggin…
slapi-nis: NULL dereference (DoS) with specially crafted Binding DN (CVE-2021-3480) For more details about the security issue(s), including the impact, a CVSS …
xorg-x11-server: XChangeFeedbackControl integer underflow leads to privilege escalation (CVE-2021-3472) For more details about the security issue(s), including…
