Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The updated packages fix security vulnerabilities. At least one of them is known to be actively exploited. References: - https://bugs.mageia.org/show_bug.cgi?i…
Greetings fellow Linux users!Thank you to everyone who took part in our LinuxSecurity User Survey. As you may be aware of, LinuxSecurity.com is currently in th…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) on Wednesday issued a joint advisory warning of …
When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the di…
Microsoft on Friday warned of active attacks exploiting unpatched Exchange Servers carried out by multiple threat actors, as the hacking campaign is believed t…
The SolarWinds Sunburst attack has been in the headlines since it was first discovered in December 2020.ÂAs the so-called layers of the onion are peeled back, …
A directory traversal vulnerability was discovered in python-flask-cors, a Flask extension for handling Cross Origin Resource Sharing (CORS), allowing to acces…
This package allowed ../ directory traversal to access private resources because resource matching did not ensure that pathnames were in a canonical format.
RDFLib could be made to made to execute arbitrary code if it were running in a directory with a specially crafted file.
As ransomware attacksÂagainst critical infrastructure continue to spike in recent months, cybersecurity researchers have uncovered a new entrant that has been …
Over the next couple of weeks and months, LinuxSecurity editors and contributors will be writing a series on Linux Web Server Security. This week, we're summar…
As tensions between the U.S. and China heighten over data security issues, the Chinese government has taken a proactive step to protect users' privacy with a d…
Heads up Instagram users! The hackers are targeting you once again. A new phishing scheme is actively targeting Instagram usersNew Instagram Phishing Scheme Ai…
Fabian Vogt reported that the Ark archive manager did not sanitise extraction paths, which could result in maliciously crafted archives with symlinks writing o…
Website security is indispensable in today's ever-increasing technology landscape. If proactive and pre-emptive website security is not put in place,10 Most Im…
Anyone paying attention to the cybersecurity technology market has heard the term XDR - Extended Detection and Response.XDR is a new technology approach that c…
A maliciously crafted TAR archive containing symlink entries would install files anywhere in the user's home directory upon extraction (CVE-2020-24654). Refere…
A directory traversal vulnerability was discovered in Icinga Web 2, a web interface for Icinga, which could result in the disclosure of files readable by the p…
A directory traversal vulnerability was discovered in Icinga Web 2, a web interface for Icinga, which could result in the disclosure of files readable by the p…
Multiple vulnerabilities were discovered in Python2.7, an interactive high-level object-oriented language.
Cybersecurity researchers today took the wraps off a sophisticated, multi-functional peer-to-peer (P2P) botnet written in Golang that has been actively targeti…
In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the execut…
An access flaw was found in targetcli, where the /etc/target and underneath backup directory/files were world-readable. This flaw allows a local attacker to ac…
When deepfake is increasingly becoming a problem, scientists have come up with a counteractive strategy. Researchers have shared details aboutResearchers Propo…
