Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The extensively marketed Ring smart devices are once again in hot water. Recently, numerous reports have surfaced online highlighting severalHackers Continue t…
Researchers have uncovered a new malware campaign which they dub the 'Hornets Nest'. What makes this attack notable is theResearchers Uncovered Malware That Dr…
Another cyberattack on the healthcare sector has put the privacy of millions of users at risk. Recently, a Canadian healthcareLifeLabs Disclosed Data Breach Im…
A change introduced in libssh 0.6.3-4+deb8u4 (which got released as DLA 2038-1) has broken x2goclient's way of scp'ing session setup files from client to serve…
Not much time has passed since Google launched its Chrome browser version 79 with improved privacy and security features. However,Update For Google Chrome 79 O…
Stephan Zeisberg reported an out-of-bounds write vulnerability in the _sasl_add_string() function in cyrus-sasl2, a library implementing the Simple Authenticat…
There has been an out-of-bounds write in Cyrus SASL leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP c…
Linux network stack maintainerÂDavid MillerÂhasÂcommittedÂthe WireGuard VPN project into the Linux "net-next" source tree. Miller maintains bothÂnetÂandÂnet-ne…
Updated libssh packages fix security vulnerability: In an environment where a user is only allowed to copy files and not to execute applications, it would be …
It was discovered that debian-edu-config, a set of configuration files used for the Debian Edu blend, configured too permissive ACLs for the Kerberos admin ser…
Are you a Mozilla Firefox user looking to better protect your privacy online? Good news for Firefox users interested in turning on the browser'sÂDNS-over-HTTPS…
It was discovered that there was a potential account hijack vulnerabilility in Django, the Python-based web development framework.
Kernel: KVM: OOB memory access via mmio ring buffer (CVE-2019-14821) Bug Fix(es): * KEYS: prevent creating a different user's keyrings SL-6.10 * BUG: unable to…
A serious security bug affected numerous TP-Link routers. The vulnerability in TP-Link Archer routers could allow a potential attacker toBuffer Overflow Exploi…
An issue has been found in harfbuzz, an OpenType text shaping engine. Due to a buffer over-read, remote attackers are able to cause a denial of
It was found that libssh, a tiny C SSH library, does not sufficiently sanitize path parameters provided to the server, allowing an attacker with only SCP file …
openslp: Heap-based buffer overflow in ProcessSrvRqst() in slpd_process.c leading to remote code execution (CVE-2019-5544) SL7 x86_64 openslp-2.0.0-8.el7_7.i68…
The funky vulnerability of the month ' what we call aÂBWAIN, short forÂBug With an Impressive NameÂ' isÂPlundervolt, also known asÂCVE-2019-11157. Learn more a…
Programming has five main steps: the identification and definition of the problem, the planning of the solution for the problem, coding of the program, testing…
Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code. For Debian 8 "Jessie", these problem…
Like every other thing connected to the internet, power plants are also vulnerable to cyber attacks. Recently, researchers caught numerousMultiple RCE Vulnera…
VISA has recently issued a cybersecurity alert for the residents of North America. VISA has noticed a wave of POSVISA Alerts North America Regarding POS Malwar…
A vulnerability was found in dnsmsq through version 2.90, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via v…
The Senate Judiciary Committee recently held aÂhearingÂon encryption and 'lawful access.' That's the fanciful idea that encryption providers can somehow allow …
