Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and th…
Right after Facebook's data leak incident that affected 533 million people, another data dump has…Following Facebook, Data Of 500+ Million LinkedIn Users Put F…
squid: improper input validation may allow a trusted client to perform HTTP request smuggling (CVE-2020-25097) For more details about the security issue(s), in…
nettle: Out of bounds memory access in signature verification (CVE-2021-20305) For more details about the security issue(s), including the impact, a CVSS score…
samba: Out of bounds read in AD DC LDAP server (CVE-2021-20277) For more details about the security issue(s), including the impact, a CVSS score, acknowledgmen…
kernel: out-of-bounds read in libiscsi module (CVE-2021-27364) * kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365) * kernel: iscsi: unrestri…
Behind the strategies and solutions needed to counter today's cyber threats are'dedicated cybersecurity researchers. They spend their lives dissecting code and…
Multiple security issues were found in MediaWiki, a website engine for collaborative work, which could result in incomplete page/blocking protection, denial of…
It was discovered that there was a potential directory traversal issue in Django, a Python-based web development framework. The vulnerability could have been e…
The maintainers of the PHP programming language have issued an update regarding the security incident that came to light late last month, stating that the acto…
Fix issue where chromium would crash upon accessing components/cast_*. Thanks to Gentoo for the patch. It also fixes some security issues, because why not: CVE…
Cyber attackers are actively setting their sights on unsecured SAP applications in an attempt to steal information and sabotage critical processes, according t…
Facebook has once again caught media attention for a not-so-good reason. This time, again, Facebook…Data Of 533 Million Facebook Users Leaked On Dark Web For F…
Another ransomware incident has surfaced online targeting a famous firm. This time, the victim is…Italian Menswear Brand Boggi Milano Suffered Ransomware Attac…
A researcher has devised a new strategy to protect wireless networks. Dubbed nzyme, the tool…Nzyme Project ' An Inclusive WiFi Defense System To Detect Bandits…
Cyku Hong from DEVCORE discovered that php-nette, a PHP MVC framework, is vulnerable to a code injection attack by passing specially formed parameters to URL t…
Updated ruby-em-http-request packages fix security vulnerability: A flaw was found in rubygem-em-http-request. The eventmachine library does not verify the hos…
A 22-year-old man from the U.S. state of Kansas has been indicted on charges that he unauthorizedly accessed a public water facility's computer system, jeopard…
Update to upstream 20210315 release ---- Update to upstream 20210208 release: * rtl_bt: Updates for RTL8822C, RTL8821C, added RTL8852A * Link Cypress brcmfmac …
While mitigations are in place to protect Linux systems from Spectre attacks, newly discovered vulnerabilities…Two Linux Vulnerabilities Could Allow Bypassing …
While ransomware attacks are becoming common, still not every victim firm knows how to deal…FatFace Disclosed Data Breach; Turns Out It Suffered Ransomware Att…
flatpak: "file forwarding" feature can be used to gain unprivileged access to files (CVE-2021-21381) For more details about the security issue(s), including th…
Kevin Chung discovered that lxml, a Python binding for the libxml2 and libxslt libraries, did not properly sanitize its input. This would allow a malicious use…
Cybersecurity researchers on Monday disclosed two new vulnerabilities in Linux-based operating systems that, if successfully exploited, could let attackers cir…
