Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update jupyterlab and python-notebook to fix CVE-2024-43805.
Update jupyterlab and python-notebook to fix CVE-2024-43805.
Several security issues were fixed in Dovecot.
Researchers warns enterprise users about a latest malware campaign targeting Middle East-based firms. The campaign…Hackers Implant Backdoor via Fake Palo Alto …
Several security issues were fixed in Dovecot.
Two vulnerabilities have been discovered in the IMAP implementation of the Dovecot mail server: Excessive numbers of address headers or very large headers can …
Multiple vulnerabilities have been discovered in protobuf-c, the worst of which could result in denial of service.
A vulnerability has been discovered in Ruby on Rails, which can lead to remote code execution via serialization of data.
A vulnerability has been discovered in Levenshtein, which could lead to a remote code execution.
sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages …
It was discovered that there was a buffer overflow vulnerability in libndp, a library for implementing IPv6's "Neighbor Discovery Protocol" (NDP) and is used b…
Microsoft is warning about the potential abuse of Azure Service Tags by malicious actors to forge requests from a trusted service and get around firewall rules…
This release fixes various issues in shim bootloader and updates it to a supported version. Older versions of the shim may eventually be blocked by Secure Boot…
A vulnerability has been discovered in U-Boot tools which can lead to execution of arbitary code.
Days after the details about a severe zero-day vulnerability in Ivanti mobile management software surfaced…Ivanti Warns Of Another EPMM Zero-Day Flaw Under Att…
Ivanti has disclosed yet another security flaw impacting Endpoint Manager Mobile (EPMM), formerly known as MobileIron Core, that it said has been weaponized as…
The newCyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA)requires CISA to create rules regarding cyber incident reporting by critical in…
Cybercrime is a real threat. According to the US Cybersecurity & Infrastructure Security Agency (CISA),…7 Ways to Protect Your Business Against Cyber Threats o…
Microsoft has discovered flaws that could be combined to gain root privileges on Linux systems.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week added 95 more security flawsto itsKnown Exploited Vulnerabilities Catalog, taking th…
The CISA recently urged developers to update Discourse versions 2.7.8 and earlier, warning of a critical remote code execution (RCE) vulnerability ( CVE-2021-4…
A new threat is in the wild targeting users with false ransomware campaigns. Identified as…Microsoft Warns Of Fake Ransomware StrRAT That Is Actually A Potent …
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The Operational Technology Cybersecurity Coalition released a white paper urging the CISA to create a new directive centered around operational technology, whi…
