Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A Chinese-speaking threat actor codenamed GoldFactory has been attributed to the development of highly sophisticated banking trojans, including a previously un…
arm32: The cache may not be properly cleaned/invalidated (take two) [XSA-447, CVE-2023-46837] pci: phantom functions assigned to incorrect contexts [XSA-449, C…
A potential security vulnerability exists in the command-not-found tool in Ubuntu, which threat actors could exploit to recommend and install malicious package…
An update that fixes three vulnerabilities is now available.
An update that fixes four vulnerabilities is now available.
Ubuntu is introducing a new Desktop Security Center , aiming to enhance accessibility to underlying security features for users. Although still a work in progr…
Canonical is introducing a new Desktop Security Center , aiming to enhance accessibility to underlying security features for users of Ubuntu and other Linux di…
The landscape of cybersecurity in financial services is undergoing a rapid transformation. Cybercriminals are exploiting advanced technologies and methodologie…
New dnsmasq packages are available for Slackware 15.0 and -current to fix security issues.
The Midnight Blizzard and Cloudflare-Atlassian cybersecurity incidents raised alarms about the vulnerabilities inherent in major SaaS platforms. These incident…
Threat actors are leveraging a recently disclosed security flaw impacting Ivanti Connect Secure, Policy Secure, and ZTA gateways to deploy a backdoor codenamed…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced that it's partnering with the Open Source Security Foundation (OpenSSF) Securing Sof…
The release of Linux kernel 6.7 introduces various security features and updates. One notable improvement mentioned in the article is the update to the crypto …
Four significant vulnerabilities have been discovered in the GNU C Library (glibc) , a fundamental component of most Linux distributions. These vulnerabilities…
Fix webkit_web_context_allow_tls_certificate_for_host to handle IPv6 URIs produced by SoupURI. Ignore stops with offset zero before last one when rendering gra…
New xpdf packages are available for Slackware 15.0 and -current to fix security issues.
The operators of Raspberry Robin are now using two new one-day exploits to achieve local privilege escalation, even as the malware continues to be refined and …
Threat hunters have identified a new variant of Android malware called MoqHao that automatically executes on infected devices without requiring any user intera…
Sixty-one banking institutions, all of them originating from Brazil, are the target of a new banking trojan called Coyote."This malware utilizes the Squirrel i…
Cloud computing has innovated how organizations operate and manage IT operations, such as data storage, application deployment, networking, and overall resourc…
Upstream version 6.6.14 with many bugfixes and at least the following security fixes: An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/s…
Implementing robust security measures in Linux-based systems is essential and doesn't need to be complex. In this article, we'll provide a comprehensive overvi…
New expat packages are available for Slackware 15.0 and -current to fix security issues.
The Linux Foundation recently announced the launch of the Post-Quantum Cryptography Alliance (PQCA ). This open and collaborative initiative aims to address th…
