Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
First of all, if you have any of the below-listed apps installed on your Android device, you are advised to uninstall it immediately.Cybersecurity researchers …
Are you aware that Amazon Web Services (AWS) customers were hit by severe outages yesterday after an apparent DDoS attack took S3 and other services offline fo…
Updated libsndfile package fixes security vulnerability: It was discovered that libsndfile incorrectly handled certain malformed files. A remote attacker coul…
NordVPN, one of the most popular and widely used VPN services out there, yesterday disclosed details of a security incident that apparently compromised one of …
Protection from cyberattacks begins way before attackers launch their weapons on an organization. Continuously monitoring the environment for security weakness…
libpcap (Packet CAPture), a low-level network monitoring library, does not properly validate the PHB header length before allocating memory. This update added …
Several vulnerabilities have been discovered in tcpdump, a command-line network traffic analyzer. These vulnerabilities might result in denial of service or, p…
CEOs who lie about misusing consumers data could face up to 20 years in jail under a new piece of US legislation proposed last week. What are your thoughts on …
Once again, a peculiar phishing attack has surfaced online, this time, targeting Stripe users. The attack not only aims atPhishing Attack Targets Stripe Users …
Despite the presence and implementation of robust security protocols, various persistent and ever-evolving hacking strategies continue to exist. This clearlyHa…
It was discovered that Aspell, the GNU spell checker, incorrectly handled certain inputs which leads to a stack-based buffer over-read. An attacker could poten…
Are you a Massachusetts resident? Face surveillance by government poses a threat to our privacy, chills protest in public places, and amplifies historical bias…
The update of libsdl1.2 released as DLA 1713-1 led to a regression, caused by an incomplete fix for CVE-2019-7637. This issue was known upstream and resulted, …
The updated packages fix a security vulnerability: Potential bypass of Runas user restrictions. (CVE-2019-14287) References:
Updated e2fsprogs packages fix security vulnerability: Lilith of Cisco Talos discovered a buffer overflow flaw in the quota code used by e2fsck from the ext2/…
This kernel update is based on the upstream 5.3.6 and fixes several issues. * a potential kernel crash by using suppress-prefix rule in ipv6 * 3rdparty rtl87…
Updated nmap packages fix security vulnerability: Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack …
Mozilla has announced another bold step towards ensuring better security for users. This time, they will be fending off codeMozilla Hardens Their Firefox Brows…
Joe Vennix discovered that sudo, a program designed to provide limited super user privileges to specific users, when configured to allow a user to run commands…
Sudo could be made to run commands as root if it called with a specially crafted user ID.
The tiny ATtiny85 chip doesnt look like the next big cyberthreat facing the world, but sneaking one on to a firewall motherboard would be bad news for security…
This update includes the changes in tzdata 2018c. Notable changes are: - Brazil has canceled DST and will stay on standard time indefinitely.
The update for openssl released as DSA 4539-1 introduced a regression where AES-CBC-HMAC-SHA ciphers were not enabled. Updated openssl packages are now availab…
