The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Details have emerged about a now-patched security vulnerability that could allow a bypass of the Secure Boot mechanism in Unified Extensible Firmware Interface…
This is the August 2024 monthly update for .NET 8. This includes a fix for CVE-2024-38167 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release-…
This is the August 2024 monthly update for .NET 8. This includes a fix for CVE-2024-38167 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release-…
In an era where cybersecurity threats loom larger than ever, the discovery of a Remote Code Execution (RCE) vulnerability in OpenSSH by Qualys' Threat Research…
Select versions of the OpenSSH secure networking suite are susceptible to a new vulnerability that can trigger remote code execution (RCE).The vulnerability, t…
GitHub has revealed that it has rotated some keys in response to a security vulnerability that could be potentially exploited to gain access to credentials wit…
WordPress has released version 6.4.2 with a patch for a critical security flaw that could be exploited by threat actors by combining it with another bug to exe…
One of the new Linux networking features we've been looking forward to seeing in the kernel is TCP Authentication Option (TCP-AO / RFC5925) as a means of impro…
Details have emerged about a now-patched flaw in OpenSSH that could be potentially exploited to run arbitrary commands remotely on compromised hosts under spec…
A new strain of malicious software that's engineered to penetrate and disrupt critical systems in industrial environments has been unearthed.Google-owned threa…
A set of 38 security vulnerabilities has been uncovered in wireless industrial internet of things (IIoT) devices from four different vendors that could pose a …
Malicious actors are actively attempting to exploit a recently patched critical vulnerability in Control Web Panel (CWP) that enables elevated privileges and u…
It was discovered that there was a potential remote denial-of-service vulnerability in the knot-resolver DNSSEC-validating DNS resolver. Remote attackers could…
Researchers discovered a prototype pollution vulnerability in the Blitz.js framework that could lead to remote…Blitz.js Framework Vulnerability Could Allow Rem…
A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrota…
The coordinated cyberattacks targetingUkrainian government websitesand the deployment of a data-wiper malware calledWhisperGateon select government systems are…
Release of stargz snapshotter v0.10.1. This release contains the mitigation for CVE-2021-41190. Please see the release note for details. https://github.com/con…
Release of stargz snapshotter v0.10.1. This release contains the mitigation for CVE-2021-41190. Please see the release note for details. https://github.com/con…
This is the May 2021 release for .NET Core 3.1. Release Notes are here:https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.15/3.1.15.md This include…
This is the May 2021 release for .NET 5. Release Notes are here: https://github.com/dotnet/core/blob/main/release-notes/5.0/5.0.6/5.0.6.md. This includes a fix…
This is the May 2021 release for .NET Core 3.1. Release Notes are here:https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.15/3.1.15.md This include…
This is the May 2021 release for .NET 5. Release Notes are here: https://github.com/dotnet/core/blob/main/release-notes/5.0/5.0.6/5.0.6.md. This includes a fix…
This is the May 2021 release for .NET Core 3.1. Release Notes are here:https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.15/3.1.15.md This include…
This is the May 2021 release for .NET 5. Release Notes are here: https://github.com/dotnet/core/blob/main/release-notes/5.0/5.0.6/5.0.6.md. This includes a fix…