Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Rust 1.56.1 adds a mitigation for CVE-2021-42574, the "trojan source" attack that obfuscates code with BiDi control characters. The compiler will now error on …
Months after researchers detailed Braktooth bugs, they now have released the PoC exploit to the…US CISA Pushes Vendors For BrakTooth Patches After PoC Goes Pub…
Rust 1.56.1 adds a mitigation for CVE-2021-42574, the "trojan source" attack that obfuscates code with BiDi control characters. The compiler will now error on …
Rust 1.56.1 adds a mitigation for CVE-2021-42574, the "trojan source" attack that obfuscates code with BiDi control characters. The compiler will now error on …
Google has rolled out its monthly security patches for Android with fixes for 39 flaws, including a zero-day vulnerability that it said is being actively explo…
The U.S. Cybersecurity Infrastructure and Security Agency (CISA) on Thursday warned of continued ransomware attacks aimed at disrupting water and wastewater fa…
Microsoft on Monday revealed new malware deployed by the hacking group behind the SolarWinds supply chain attack last December to deliver additional payloads a…
This advisory resolves CVE issues filed against XP2 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP2 code ba…
Prosody 0.11.10 release from their stable branch. This release primarily fixes CVE-2021-37601, a remote information disclosure vulnerability. See the previousl…
Prosody 0.11.10 release from their stable branch. This release primarily fixes CVE-2021-37601, a remote information disclosure vulnerability. See the previousl…
An infamous cross-platform crypto-mining malware has continued to refine and improve upon its techniques to strike both Windows and Linux operating systems by …
The infamous cross-platform LemonDuck crypto-mining malware has continued to refine and improve upon its techniques to strike both Linux and Windows OSes by se…
This update provides Mbed TLS 2.16.11, with a number of bug fixes, including security fixes. The intermediate version 2.16.10 are included security fixes. See …
This advisory resolves CVE issues filed against XP2 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP2 code ba…
An ongoing brute-force attack campaign targeting enterprise cloud environments has been spearheaded by the Russian military intelligence since mid-2019, accord…
This advisory resolves CVE issues filed against XP1 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP1 code ba…
Mitigation for CVE-2021-21419 See: https://github.com/eventlet/eventlet/security/advisories/GHSA-9p9m-jm8w-94p2 for more details.
Mitigation for CVE-2021-21419 See: https://github.com/eventlet/eventlet/security/advisories/GHSA-9p9m-jm8w-94p2 for more details.
A new threat is in the wild targeting users with false ransomware campaigns. Identified as…Microsoft Warns Of Fake Ransomware StrRAT That Is Actually A Potent …
Once again, the practice of procrastinating updates by the users has let the attackers exploit…Trend Micro Warns Users For Active Exploitation Of An Already-Pa…
Cisco has addressed a maximum severity vulnerability in its Application Centric Infrastructure (ACI) Multi-Site Orchestrator (MSO) that could allow an unauthen…
Microsoft has warned about a new strain of mobile ransomware that takes advantage of incoming call notifications and Android's Home button to lock the device b…
The nodejs package has been updated to the latest version in the 10.x branch, which is 10.22.1 at this time. It fixes several security issues and other bugs. S…
A security researcher earlier today publicly revealed details and proof-of-concept exploit code for an unpatched, critical zero-day remote code execution vulne…
