Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
In our increasingly digital society, protecting the privacy of sensitive data and our behavior online is a universal concern. Many users switch to Linux for it…
The maintainers of OpenSSL have released a fix for two high-severity security flaws in its software that could be exploited to carry out denial-of-service (DoS…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
Popular audio chat app Clubhouse has now made it to the news for a not-so-good…BlackRock Malware Reappears On Play Store Posing As Clubhouse App on Latest Hack…
The U.S. Department of Justice yesterday announced updates on two separate cases involving cyberattacks'a Swiss hacktivist and a Russian hacker who planned to …
This kernel update is based on upstream 5.10.25 and fixes atleast the following security issues: Unprivileged BPF programs running on affected systems can bypa…
Continuing with their invasive strategies, the e-commerce predator Magecart has developed another malicious feature. As…Magecart Skimmer Attacks Sites Whilst H…
The Apache Software Foundation on Friday addressed a high severity vulnerability in Apache OFBiz that could have allowed an unauthenticated adversary to remote…
While steganography is nothing new, a researcher has taken this technique to the next level.…Researcher Demonstrates Hiding Data In Twitter Images on Latest Ha…
A new research has yielded yet another means to pilfer sensitive data by exploiting what's the first "on-chip, cross-core" side-channel attack targeting the ri…
Google has just released a second patch for another zero-day affecting its Chrome browser. While…Google Patched Second Chrome Zero-Day Within A Month on Latest…
On case-insensitive file systems with support for symbolic links, if Git is configured globally to apply delay-capable clean/smudge filters (such as Git LFS), …
initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description (CVE-2019-13990…
Researchers have discovered a new side-channel that they say can be reliably exploited to leak information from web browsers that could then be leveraged to tr…
Cybersecurity is a hot-button issue right now and for good reason. 2020 was full of…The Cybersecurity Trends Affecting the Market in 2021 on Latest Hacking News
GitHub has recently patched a vulnerability that potentially threatened all user accounts. Though, it actually…GitHub Vulnerability Could Expose Users' Session…
The Solarwinds security blunders have raised awareness of the importance of protecting software supply chains from unauthorized changes. Now, the Linux Foundat…
Threat actors known for keeping a low profile do so by ceasing operations for prolonged periods in between to evade attracting any attention as well as constan…
Greetings fellow Linux security enthusiasts!We're rebuilding our site and need your help! LinuxSecurity is currently undergoing a major overhaul and we would l…
Linux Kernel 5.12 RC2 has been released early due to a nasty swap file bug. Do not use Linux Kernel 5.12 RC1 for testing - you stand to lose data!
Heads up, Chrome users! Google has just fixed another zero-day bug in its Chrome browser…Google Fixes A Chrome Zero-Day Bug Under Active Exploitation on Latest…
FireEye and Microsoft on Thursday said they discovered three more malware strains in connection with the SolarWinds supply-chain attack, including a "sophistic…
The attack surface is virtually expanding before our eyes. Protecting assets across multiple locations, with multiple solutions from different vendors, has bec…
After advocating for years for the HTTPS adaptation, Google has now taken another step. In…Google Will Launch HTTPS First Approach With URLs From Chrome 90 on …
