Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The Citizen Lab has uncovered another iPhone zero-click bug that NSO exploited to deploy their…New iPhone Zero-Click Bug Exploited In Pegasus Attacks Against C…
An update that fixes one vulnerability is now available.
Containers were incorrectly started with non-empty inheritable Linux process capabilities (CVE-2022-24769) References: - https://bugs.mageia.org/show_bug.cgi?i…
waitress could be made to expose sensitive information if it received a specially crafted request.
containerd would allow unintended access to files over the network.
An update that fixes one vulnerability is now available.
Hackers could exploit a Linux kernel bug to escape Kubernetes containers and access critical resources; however, the threat is minimized as any attacker needs …
An update that fixes 5 vulnerabilities is now available.
David Bouman discovered a heap-based buffer overflow vulnerability in the base64 functions of aide, an advanced intrusion detection system, which can be trigge…
AIDE could be made to crash or run programs as an administrator if it opened a specially crafted file.
An update that fixes one vulnerability is now available.
David Bouman discovered a heap-based buffer overflow vulnerability in the base64 functions of aide, an advanced intrusion detection system, which can be trigge…
AIDE could be made to crash or run programs as an administrator if it opened a specially crafted file.
Updated RHEL-8 based Cryostat container images are now available Red Hat Product Security has rated this update as having a security impact of Important. A Com…
This is the second service release to update the new stable version 1.5. It provides a bunch of small fixes and improvements to the OAuth feature as well as a …
Researchers have identified a new phishing attack where the hackers exploit the Google Docs Comment…New Phishing Campaign Exploits Google Docs Comment Feature …
Apple recently fixed a security vulnerability in the macOS operating system that could be potentially exploited by a threat actor to "trivially and reliably" b…
After the disastrous Log4j vulnerability disrupted the online world, another vulnerability surfaced online. It turns…Another Apache Log4j Bug Discovered – Patc…
Update containerd and moby-engine - Security fix for CVE-2021-41190
Update containerd and moby-engine - Security fix for CVE-2021-41190
Release of stargz snapshotter v0.10.1. This release contains the mitigation for CVE-2021-41190. Please see the release note for details. https://github.com/con…
Release of stargz snapshotter v0.10.1. This release contains the mitigation for CVE-2021-41190. Please see the release note for details. https://github.com/con…
Several security issues were fixed in Mailman.
Firejail could be made to overwrite files as the administrator.
