Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week released an Industrial Control Systems (ICS) advisory warning of multiple vulnerabil…
The wordpress package released in DSA-5279-1 had incorrect dependencies that could not be satisfied in Debian stable: this update corrects the problem. For ref…
While you might like to play old songs, Microsoft, however, warns you against it –…Playing This Janet Jackson Song May Crash Your Laptop on Latest Hacking News…
Microsoft has once again alerted users about a new Sysrv botnet variant that targets web…Microsoft Warns About New Sysrv Botnet Variant Attacks Web Servers on …
Rebase to 8.2204.0-1 Add patch resolving a potential heap buffer overflow, details: https://github.com/rsyslog/rsyslog/security/advisories/GHSA- ggw7-xr6h-mmr8
Rebase to 8.2204.0 Add patch to resolve potential heap buffer overflow, details: https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8
The Google and OpenSSF Package Analysis project aims to reduce security risks created by developers' crazy package-updating schedules.
Microsoft has discovered flaws that could be combined to gain root privileges on Linux systems.
US cybersecurity officials have issued a detailed advisory alerting cyberattacks on critical ICS infrastructure via…US Warns Of Cyberattacks On Industrial Cont…
The Taiwanese-based technology giant Zyxel has warned users of an authentication bypass vulnerability in its…Zyxel Warns Firewall Users of Authentication Bypas…
US CISA has recently warned of cyberattacks on internet-connected UPS devices. Thus, users must remain…CISA Warns Internet-Connected UPS Users To Be Wary Of Cy…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week added 95 more security flawsto itsKnown Exploited Vulnerabilities Catalog, taking th…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA)expandedits Known Exploited Vulnerabilities Catalog to include a recently disclosed zero-day fl…
A team of academic researchers has shared a detailed study about a major security design…Researcher Warns: Samsung Phones’ ‘TrustZone’ Is Actually ‘No-Trust Zo…
The Qualys Research Team reached out to LinuxSecurity after discovering a memory corruption vulnerability in polkit's pkexec. Pkexec is a SUID-root program tha…
The Qualys Research Labs discovered a local privilege escalation in PolicyKit's pkexec. Details can be found in the Qualys advisory at
Security fix for CVE-2022-21658, a TOCTOU race condition in std::fs::remove_dir_all. Privileged programs should be rebuilt if they use this function on paths t…
Security fix for CVE-2022-21658, a TOCTOU race condition in std::fs::remove_dir_all. Privileged programs should be rebuilt if they use this function on paths t…
This advisory resolves CVE issues filed against XP2 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP2 code ba…
Multiple security fixes for firefox. See references for details. References: - https://bugs.mageia.org/show_bug.cgi?id=29865 - https://www.mozilla.org/en-US/se…
Cybersecurity agencies from Australia, Canada, New Zealand, the U.K., and the U.S. on Wednesday released a joint advisory in response to widespread exploitatio…
VMware has shipped updates to address two security vulnerabilities in vCenter Server and Cloud Foundation that could be abused by a remote attacker to gain acc…
Nation-state operators with nexus to Iran are increasingly turning to ransomware as a means of generating revenue and intentionally sabotaging their targets, w…
Rust 1.56.1 adds a mitigation for CVE-2021-42574, the "trojan source" attack that obfuscates code with BiDi control characters. The compiler will now error on …
