Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Mozilla: Use-after-free when removing data about origins (CVE-2020-6805) * Mozilla: BodyStream::OnInputStreamReady was missing protections against state confus…
A heap-based buffer overflow in Binary diff might allow remote attackers to execute arbitrary code.
A heap-based buffer overflow in GNU FriBidi might allow remote attackers to execute arbitrary code.
Multiple vulnerabilities have been found in Cacti, the worst of which could lead to the remote execution of arbitrary code.
tif_getimage.c in LibTIFF, as used in GDAL has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a …
Online guitar tutoring website TrueFire has apparently suffered a 'Magecart' style data breach incident that may have potentially led to the exposure of its cu…
In the latest Red Hat Product Security Risk Report, Red Hat reveals how it addresses security concerns both for Linux and open-source software.
Extending the list of security breach victims, another incident surfaces online exposing customers' data. This time, the affected firm isOpen Exchange Rates Di…
VMware has recently patched numerous bugs across multiple products. The most notable of all is a critical guest-to-host vulnerability affectingVMware Patched C…
Another unsecured database has leaked data online threatening the privacy of users. This time, the unsecured database belonging to aUnsecured Database Exposed …
Another malware has become active in the wild targeting Android devices. Dubbed Cookiethief, this Android malware does what its nameCookiethief Malware Targets…
Mozilla has released the updated version of its Firefox browser this week. With Firefox 74, Mozilla not only fixed numerousMozilla Released Firefox 74 With Sec…
This update upgrades Firefox to version 68.6.0 ESR. * Mozilla: Use-after-free when removing data about origins (CVE-2020-6805) * Mozilla: BodyStream::OnInputSt…
A heap-based buffer overflow in GStreamer Base Plugins might allow remote attackers to execute arbitrary code.
A buffer overflow in gdb might allow a remote attacker to cause a Denial of Service condition.
Cybercriminals will stop at nothing to exploit every chance to prey on internet users.Even the disastrous spread of SARS-COV-II (the virus), which causes COVID…
Shortly after releasing its monthly batch of security updates, Microsoft late yesterday separately issued an advisory warning billions of its Windows users of …
Microsoft today released security updates to fix a total of 115 new security vulnerabilities in various versions of its Windows operating system and related so…
AMD processors from as early as 2011 to 2019 carry previously undisclosed vulnerabilities that open them to two new different side-channel attacks, according t…
All Intel processors released in the past 5 years contain an unpatchable vulnerability that could allow hackers to compromise almost every hardware-enabled sec…
The chips are vulnerable during boot-up, so they can't be patched with a firmware update.
Updated dojo package fixes security vulnerability: dojox was vulnerable to Cross-site Scripting. This was due to dojox.xmpp.util.xmlEncode only encoding the f…
Updated pcre packages fix security vulnerabilities: The pcre package has been updated to version 8.44, fixing an integer overflow and NULL pointer dereference…
Release 6.6.4p1 (2020-02-24) --- - An out of bounds read in smtpd allows an attacker to inject arbitrary commands into the envelope file which are then execute…
