Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
After pioneering a bug rewards program for printer security, HP takes another step in this direction. As announced, HP hasHP Printer Bug Bounty Expands To Incl…
The TeamTNT threat group has updated Black-T - its crypto-mining worm - with Linux password-stealing capabilities and with an additional network scanner to hel…
Mumble 1.3.2. === Client * Fixed: Overlay not starting (#4282) Server * Fixed: keychain-error on macOS for custom certificates (#4345) Known issues * Overlay b…
**PHP version 7.4.11** (01 Oct 2020) **Core:** * Fixed bug php#79699 (PHP parses encoded cookie names so malicious `__Host-` cookies can be sent). (**CVE-2020-…
Mumble 1.3.2. === Client * Fixed: Overlay not starting (#4282) Server * Fixed: keychain-error on macOS for custom certificates (#4345) Known issues * Overlay b…
Writing advanced malware for a threat actor requires different groups of people with diverse technical expertise to put them all together. But can the code lea…
The Apple T2 security chip has finally been jailbroken! Here's all you need to know about it. The latest update of checkra1n adds support for bridgeOS '' the o…
- Update to 4.3.1 - PowerDNS Security Advisory 2020-05 (CVE-2020-17482) Release notes: https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.3.1 S…
A potential HTTP request smuggling vulnerability in WEBrick was reported. WEBrick (bundled along with jruby) was too tolerant against
A potential HTTP request smuggling vulnerability in WEBrick was reported. WEBrick (bundled along with ruby2.3) was too tolerant against
This package allowed ../ directory traversal to access private resources because resource matching did not ensure that pathnames were in a canonical format.
A hacking group known for its attacks in the Middle East, at least since 2017, has recently been found impersonating legitimate messaging apps such as Telegram…
Another ransomware attack surfaces online. The victim belongs to the health sector, thus affecting the patients. Reportedly, several hospitals inUHS Hospital N…
While VPNs are supposed to protect users, the same tools can pose a threat to user security if found vulnerable.Fortinet VPN Flaw Exposes 200K Businesses To Mi…
Another crypto exchange has suffered a loss of millions of dollars following a cyber attack. As reported, the latest victimKuCoin Cryptocurrency Exchange Hacke…
Updated OpenShift Container Storage packages fixing various security issues and other bugs are now available for Red Hat OpenShift Container Storage with 3.11.…
An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with u…
A vulnerability in LinuxCIFS may allow a remote code execution via a command line option.
A vulnerability in gpsd could allow remote code execution.
A buffer overflow in libuv might allow remote attacker(s) to execute arbitrary code.
netqmail could be made to crash or run programs as any user (except root) if it received specially crafted network traffic.
Mumble 1.3.2. === Client * Fixed: Overlay not starting (#4282) Server * Fixed: keychain-error on macOS for custom certificates (#4345) Known issues * Overlay b…
- Update to 4.3.1 - PowerDNS Security Advisory 2020-05 (CVE-2020-17482) Release notes: https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.3.1 S…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, cross-site scri…
