Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Threat actors are abusing Microsoft Build Engine (MSBuild) to filelessly deliver remote access trojans and password-stealing malware on targeted Windows system…
Adobe has releasedÂPatch Tuesday updatesÂfor the month of May with fixes for multiple vulnerabilities spanning 12 different products, including a zero-day flaw…
It was discovered that there was potential directory-traversal vulnerability in Django, a popular Python-based web development framework.
Ivanti, the company behind Pulse Secure VPN appliances, has released a security patch to remediate a critical security vulnerability that was found being activ…
Ivanti, the company behind Pulse Secure VPN appliances, has released a security patch to remediate a critical security vulnerability that was found being activ…
update to 2.9.1 (fixes a potential directory traversal issue)
Hackers are scanning the internet for weaknesses all the time, and if you don't want your organization to fall victim, you need to be the first to find these w…
Security is only as strong as the weakest link. As further proof of this, Apple released an update to macOS operating systems to address an actively exploited …
A new malicious campaign is active in the wild aiming at WhatsApp users. The campaign…Wormable Malware Comes Back As 'WhatsApp Pink' ' Now Targets Signal, Tele…
An issue was discovered in rcp in MIT krb5-appl through 1.0.3. Due to the rcp implementation being derived from 1983 rcp, the server chooses which files/direct…
SonicWall has addressed three critical security vulnerabilities in its hosted and on-premises email security (ES) product that are being actively exploited in …
Microsoft has recently warned users of a new phishing campaign active in the wild. This…This Phishing Campaign Delivers IcedID Malware Via Web Contact Forms ' …
In its April slate of patches, Microsoft rolled out fixes for a total ofÂ114 security flaws, including an actively exploited zero-day and four remote code exec…
Google on Tuesday released a new version of Chrome web-browsing software for Windows, Mac, and Linux with patches for two newly discovered security vulnerabili…
The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowi…
Google on Tuesday released a new version of Chrome web-browsing software for Windows, Mac, and Linux with fixes for two security vulnerabilities, both of which…
A previously undocumented malware downloader has been spotted in the wild in phishing attacks to deploy credential stealers and other malicious payloads.Dubbed…
Linux does, occasionally, raise security concerns. While many users see it as the most secure, robust and versatile OS available, security precautions still ha…
It was discovered that there was a potential directory traversal issue in Django, a Python-based web development framework. The vulnerability could have been e…
Heads up, Windows users! A new malware campaign 'BazarCall' is actively targeting Windows systems via…BazarCall Malware Targets Windows Systems While Mimicking…
Researchers found an active campaign in the wild delivering malicious Call of Duty: Warzone cheats.…Call of Duty: Warzone Cheating Gamers Scammed on Latest Hac…
Merely weeks after releasing out-of-band patches for iOS, iPadOS, macOS and watchOS, Apple has issued yet another security update for iPhone, iPad, and Apple W…
A new malware is in the wild that is actively targeting users to steal credentials…New CopperStealer Malware Targets Users To Steal Login Credentials on Latest…
The updated packages fix security vulnerabilities. At least one of them is known to be actively exploited. References: - https://bugs.mageia.org/show_bug.cgi?i…
