Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
New upstream release with fixes for CVEs and other enhancements.
This update includes a security fix for CVE-2020-10737. Additionally, From 0.34.6: - update license on src/buffer.h - changes "/var/run" to "/run" in systemd s…
As cyberattacks continue to proliferate in volume and increase in sophistication, many organizations acknowledge that some part of their breach protection must…
Israeli cybersecurity researchers have disclosed details about a new flaw impacting DNS protocol that can be exploited to launch amplified, large-scale distrib…
Not all Internet users are careless about their digital security - but many are still victims of cybercriminals and stalkers due to mistakes online. Here are t…
Cyber warfare is not the distant future of international wars - it's the reality of today. Every digital tool andCyber Warfare ' Today and Tomorrow on Latest H…
It was discovered that exim4, a mail transport agent, suffers from a authentication bypass vulnerability in the spa authentication driver. The spa authenticati…
Honeynets are an invaluable offensive security tool for learning the tactics and motives of the blackhat community and sharing the information and insights gat…
It was discovered that exim4, a mail transport agent, suffers from a authentication bypass vulnerability in the spa authentication driver. The spa authenticati…
OpenConnect, a VPN software, had a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certifica…
Updated suricata packages fix security vulnerabilities: The suricata package has been updated to version 4.1.8, which fixes security issues and other bugs. See…
Are you a security researcher, pen-tester or ethical hacker? If so, you will definitely want to check out Kali Linux 2020.2. This release includes infrastructu…
A new version of COMpfun remote access trojan (RAT) has been discovered in the wild that uses HTTP status codes to control compromised systems targeted in a re…
Fix for CVE-2020-5283. ViewVC 1.1.28 ChangeLog - security fix: escape subdir lastmod file name (#211) - fix standalone.py first request failure (#195) ViewVC 1…
When normalizing ar member names by removing trailing whitespace and slashes, an out-out-bound read can be caused if the ar member name consists only of such c…
Another WordPress plugin with over 1 million active installations has made it to the news due to security bugs. ThisPage Builder WordPress Plugin Bugs Could Al…
NOTE: This DLA was intially sent on 2020-04-14 but for reasons unknown failed to reach the mailing list. It is being re-sent now to ensure that it appears in t…
This update includes a security fix for CVE-2020-10737. Additionally, From 0.34.6: - update license on src/buffer.h - changes "/var/run" to "/run" in systemd s…
Last Upstream release, including (among others): - (security) Prevent execution of SQL injection while assigning a technician, - (security) Permit to change ke…
Yesterday, on the 3rd anniversary of the infamous global WannaCry ransomware outbreak for which North Korea was blamed, the U.S. government released informatio…
Adopting open-source software and technology has the potential to improve an organizations' security posture if this technology is properly monitored and maint…
Huawei has denied having any official involvement in an insecure patch submitted to the Linux kernel project over the weekend, which introduced a "trivially ex…
Herbert Gilbert got the first patent on a smoke-free cigarette that he described as a device that provided a harmlessIs Your E-Cig a Security Risk? on Latest H…
WordPress websites suffered another threat from vulnerable plugins. This time, security bugs in two related WordPress plugins posed a threatBugs Two Related Wo…
