Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Are you a Firefox user? Have you heard that Mozilla has launched a new email relay service called Firefox Private Relay? The idea is to provide an 'email alias…
Two severe security flaws have been discovered in the open-source SaltStack Salt configuration framework that could allow an adversary to execute arbitrary cod…
A vulnerability was discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. LDAP search filters with nested boolean express…
A new type of mobile banking malware has been discovered abusing Android's accessibility features to exfiltrate sensitive data from financial applications, rea…
Security researchers have revealed that a vulnerability in almost all antivirus software platforms could have been exploited to disable anti-malware protection…
It was discovered that there was a integer signedness error in the miniupnpc UPnP client that could allow remote attackers to cause a denial of service attack.
**horde 5.2.22** * [jan] SECURITY: Protect image processing service from rendering active SVG content within the browser. * [jan] SECURITY: Fix XSS vulnerabili…
Microsoft has patched a worm-like vulnerability in its Teams workplace video chat and collaboration platform that could have allowed attackers to take over an …
It was discovered that eog (Eye of GNOME) incorrectly handled certain invalid UTF-8 strings. If a user were tricked into opening a specially-crafted image, a r…
It was discovered that there was a path traversal vulnerability in jsch, a pure Java implementation of the SSH2 protocol.
In the digital world of 2020, two topics eclipse most others for companies. These are mobile apps and security. Today5 things you should know about mobile app …
Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could allow remote attackers to execute arbitrary code. [More...]
Multiple vulnerabilities were found in OpenSSL, the worst of which could allow remote attackers to cause a Denial of Service condition.
Watch out Apple users!The default mailing app pre-installed on millions of iPhones and iPads has been found vulnerable to two critical flaws that attackers are…
Third-party Android application store Aptoide now seems to be in hot water. A hacker has recently leaked 20 million recordsHacker Leaked 20 Million Records Of …
Carlo Arenas discovered a flaw in git, a fast, scalable, distributed revision control system. With a crafted URL that contains a newline or empty host, or lack…
A new malware campaign has been found using coronavirus-themed lures to strike government and energy sectors in Azerbaijan with remote access trojans (RAT) cap…
Researchers have found another attack strategy targeting air-gapped systems. Dubbed as Air-ViBeR attack, this technique makes use of PC vibrationsNew “Air-ViBe…
With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host. The attack has…
- New Firefox and NSS upstream update - More info at https://www.mozilla.org/en- US/firefox/75.0/releasenotes/
- New Firefox and NSS upstream update - More info at https://www.mozilla.org/en- US/firefox/75.0/releasenotes/
Even after all fixes, Zoom still seems in hot water. Reportedly, hackers are selling two Zoom zero-days online for $500,000.Two Zoom Zero-Days Being Sold Onlin…
VMware has disclosed another serious vulnerability affecting its vCenter Server. The vulnerability, upon exploitation, could lead to information disclosure. VM…
Honeynets are an invaluable offensive security tool for learning the tactics and motives of the blackhat community and sharing the information and insights gat…
