Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Privacy and security are pressing concerns for all of us these days '' not a day goes by that we aren't bombarded with security news headlines about hacks, bre…
Several vulnerabilities have been discovered in libVNC (libvncserver Debian package), an implemenantation of the VNC server and client protocol.
CVE-2020-13663 - Drupal SA 2020-004 The Drupal core Form API does not properly handle certain form
It was discovered that libtiprc, a transport-independent RPC library, could be used for a denial of service or possibly unspecified other impact by a stack-bas…
A vulnerability has been discovered in Libtasn1, a library to manage ASN.1 structures, allowing a remote attacker to cause a denial of service against an appli…
Nvidia has released a set of security updates to remove six vulnerabilities in the Nvidia GPU Display Driver impacting both Linux and Windows machines.
GeoVision, a Taiwanese manufacturer of video surveillance systems and IP cameras, recently patched three of the four critical flaws impacting its card and fing…
One more WordPress plugin potentially risked the security of over 100,000 websites due to a security flaw. Reportedly, a seriousXSS Vulnerability Discovered In…
State-backed APT groups are increasingly targeting mobile devices in this new remote work environment. This article explores how the industry is fighting back.
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform various Cross-Side Scripting (XSS) attacks,…
Heads up Netgear router users! An unpatched flaw has made around 79 different Netgear router models vulnerable to remote attacks.79 Netgear Router Models Vulne…
It was discovered that there was an out-of-bounds access vulnerability in the server-server protocol in the ngircd Internet Relay Chat (IRC) server.
Two vulnerabilities were found in Ruby on Rails, a MVC ruby-based framework geared for web application development, which could lead to remote code execution a…
After Signal PINs, here comes another interesting move from the popular encrypted messaging app Signal. As announced, iOS users canSignal Now Allows iOS Users …
Have you heard that VideoLAN has released a new version of VLC Media Player to resolve a critical security vulnerability that could eventually allow for remote…
libexif: several buffer over-reads in EXIF MakerNote handling can lead to information disclosure and DoS (CVE-2020-13112) SL7 x86_64 libexif-0.6.21-7.el7_8.i68…
Unlike other tech firms that usually make a formal announcement of a product way before its launch, Dropbox made aDropbox Launches 'Dropbox Passwords' Password…
Updated axel package fixes security vulnerability: An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification (…
The updated packages fix a security vulnerability: An issue was discovered in dbu= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, lea…
Updated bind packages fix security vulnerabilities: It was discovered that Bind incorrectly handled certain TCP-pipelined queries. A remote attacker could poss…
Once again, a security flaw has surfaced online threatening Internet-of-Things (IoT) devices. Dubbed as CallStranger, the vulnerability allows evading security…
A flaw in Adobe Flash Player may allow local or remote attacker(s) to execute arbitrary code.
For the past two years, Intel CPUs have been under siege by an unending series of attacks that make it possible for cybercriminals to pluck passwords, encrypti…
Multiple security issues have been found in Thunderbird which could result in the setup of a non-encrypted IMAP connection, denial of service or potentially th…
