The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Apple on Monday released security updates forÂiOS,ÂmacOS, andÂwatchOSÂto address three zero-day flaws and expand patches for a fourth vulnerability that the co…
Multiple vulnerabilities have been found in Exim, the worst of which allows remote attackers to execute arbitrary code.
Iran has been linked to yet another state-sponsored ransomware operation through a contracting company based in the country, according to new analysis."Iran's …
The Qualys Research Labs reported several vulnerabilities in Exim, a mail transport agent, which could result in local privilege escalation and remote code exe…
Ivanti, the company behind Pulse Secure VPN appliances, has released a security patch to remediate a critical security vulnerability that was found being activ…
Ivanti, the company behind Pulse Secure VPN appliances, has released a security patch to remediate a critical security vulnerability that was found being activ…
An "aggressive" financially motivated threat group tapped into a zero-day flaw in SonicWall VPN appliances prior to it being patched by the company to deploy a…
update to 2.9.1 (fixes a potential directory traversal issue)
Multiple vulnerabilities have been found in GRUB, the worst might allow for circumvention of UEFI Secure Boot.
Microsoft has bought Flatcar Linux distro maker Kinvolk to boost its Azure cloud services. Kinvolk specializes in software container environments on Azure and …
A previously undocumented Linux malware with backdoor capabilities has managed to stay under the radar for about three years, allowing the threat actor behind …
Researchers have discovered a dangerous strain of Linux malware Dubbed " RotaJakiro " that went undetected for three years, enabling its operators to harvest a…
Threat actors are increasingly adoptingÂExcel 4.0 documentsÂas an initial stage vector to distribute malware such asÂZLoaderÂand Quakbot, according to new rese…
Security is only as strong as the weakest link. As further proof of this, Apple released an update to macOS operating systems to address an actively exploited …
openldap: NULL pointer dereference for unauthenticated packet in slapd (CVE-2020-25692) For more details about the security issue(s), including the impact, a C…
It was discovered that the Shibboleth Service Provider is prone to a NULL pointer dereference flaw in the cookie-based session recovery feature. A remote, unau…
Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of ar…
Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of ar…
Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of ar…
Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of ar…
A serious remote code execution flaw affected the CocoaPods package manager that could have risked…CocoaPods RCE Vulnerability Could Risk 3 Million Mobile Apps…
A micro version update (from 7.8.0 to 7.8.1) is now available for Red Hat Fuse on Karaf and Red Hat Fuse on Spring Boot 2. The purpose of this text-only errata…
As ransomware attacks continue to expand their targets, another firm has confessed to having become…Mining Tech Firm Gyrodata Suffered Ransomware Attack on Lat…
Edge locations are often unstaffed, or staffed by technicians, and edge processing requires low maintenance solutions as a result of this. The industry is shif…