Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Following the disruptive cyberattack on Colonial Pipeline, ransomware has drawn great media attention. Soon after…Cybercrime Forums XSS, Exploit, RaidForums Ba…
A team of researchers has recently shared insights into TsuNAME vulnerability risking DNS servers. As…TsuNAME Vulnerability Allows DoS Attacks Against DNS Serv…
A set of dangerous vulnerabilities have been discovered in the Exim mail server. Remote code execution, privilege escalation to root and lateral movement throu…
A serious security vulnerability existed in the PHP Composer package. Exploiting this bug could allow…Vulnerability In PHP Composer Package Could Allow Supply-…
Valve, the giant behind the popular gaming platform Steam, had lately addressed a years-old flaw.…Valve Finally Patched A Steam RCE Vulnerability That Waited A…
SonicWall has addressed three critical security vulnerabilities in its hosted and on-premises email security (ES) product that are being actively exploited in …
A potential Cross-Site Scripting (XSS) vulnerability was found in rails, a ruby based MVC framework. Views that allow the user to control the default (not foun…
netqmail could be made to crash or run programs as any user (except root) if it received specially crafted network traffic.
An update that solves one vulnerability and has 6 fixes is now available.
An update that solves one vulnerability and has 6 fixes is now available.
Multiple security issues were discovered in the Rails web framework which could result in cross-site scripting, information leaks, code execution, cross-site r…
Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash. (CVE-2017-…
A researcher found a vulnerability in the wolfSSL library that posed a threat to users' privacy. Exploiting the bug couldVulnerability In wolfSSL Could Allow M…
It was discovered that there was an issue where kmail would default to using unencrypted POP3 communication despite the UI indicating that encryption was in us…
Tim Starling discovered two vulnerabilities in firejail, a sandbox program to restrict the running environment of untrusted applications.
Cybersecurity researchers today highlighted an evasive phishing technique that attackers are exploiting in the wild to target visitors of several sites with a …
A vulnerability was discovered in Claws Mail's STARTTLS handling, possibly allowing an integrity/confidentiality compromise.
An update that fixes one vulnerability is now available.
Multiple vulnerabilities were found in Ruby on Rails, a MVC ruby-based framework geared for web application development, which could lead to remote code execut…
An update that fixes one vulnerability is now available.
Mailman could be made to inject arbitrary content in the login page if it received a specially crafted input.
Two vulnerabilities were found in Ruby on Rails, a MVC ruby-based framework geared for web application development, which could lead to remote code execution a…
An update that fixes one vulnerability is now available.
A vulnerability has been found in GNU Mailutils allowing privilege escalation.
