Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The popular Chinese social media app TikTok has once again made it to the news. But this time, it's notTikTok Glitch Allows Multi-Factor Authentication Bypass …
An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages p…
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite …
The nodejs package has been updated to the latest version in the 10.x branch, which is 10.22.1 at this time. It fixes several security issues and other bugs. S…
grub2 updates for boothole vulnerabilities in f31/f32.
Google Chrome has just announced a serious change that may not be good news for many developers. In a surpriseGoogle Sunsets Chrome Web Store Payments System A…
Two issues have been found in nfdump, a netflow capture daemon. Both issues are related to either a buffer overflow or an integer overflow, which could result …
As the pandemic continues to accelerate the shift towards working from home, aÂslew of digital threatsÂhave capitalized on the health concern to exploit weakne…
Humans make mistakes, software has bugs and some of these bugs are exploitable vulnerabilities. The existence of vulnerabilities in software is not a new probl…
A back-end server associated with Microsoft Bing exposed sensitive data of the search engine's mobile application users, including search queries, device detai…
German authorities last weekÂdisclosedÂthat a ransomware attack on the University Hospital of DàŒsseldorf (UKD) caused a failure of IT systems, resulting in th…
Over the next couple of weeks and months, LinuxSecurity editors and contributors will be writing a series on Linux Web Server Security. This week, we're summar…
Dear Android users, if you use the Firefox web browser on your smartphones, make sure it has been updated to version 80 or the latest available version on the …
After a long wait and months of beta testing, Google last week finally released Android 11, the latest version of the Android mobile operating system'with feat…
The US Department of Justice (DoJ) on Tuesday indicted two hackers for their alleged involvement in defacing several websites in the country following the assa…
Email-Address-List could be made to remotely exhaust resources if it received specially crafted email data.
The United States government today announced charges against 5 alleged members of a Chinese state-sponsored hacking group and 2 Malaysian hackers that are resp…
Apache Log4j could be made to remotely execute arbitrary code if it received specially crafted log data.
If a raw TCP socket is opened and connected to an endpoint that is fully configured with CURVE/ZAP, legitimate clients will not be able to exchange any message…
LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server…
It was discovered that insufficient sanitising of received network packets in the game server of Teeworlds, an online multi-player platform 2D shooter, could r…
Update: K-Electric website is now working fine. They have also issued a pop-up notice on their website confirming that allPakistan's Power Utility K-Electric S…
grub2 updates for boothole vulnerabilities in f31/f32.
The following security issues have been found in qemu, which could potentially result in DoS and execution of arbitrary code. CVE-2020-1711
