Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A cybersecurity researcher recently published details and proof-of-concept for an unpatched zero-day vulnerability in phpMyAdmin'one of the most popular applic…
Many people worry that quantum computers will be able to crack certain codes used to send secure messages. The codes in question encrypt data using trapdoor" m…
If you believe the US Federal Communications Commission, last Junes end of net neutrality-the system that required internet service providers to treat all data…
Northwestern University researchers have joined forces with BBN Technologies to demonstrate what they are calling the first truly quantum cryptographic data ne…
Starlet 0.33 fixes several security issues in the Starlet code: * prevent excessive CPU use when parsing malformed chunk-size lines * bound read allocations fo…
Starlet 0.33 fixes several security issues in the Starlet code: * prevent excessive CPU use when parsing malformed chunk-size lines * bound read allocations fo…
Starlet 0.33 fixes several security issues in the Starlet code: * prevent excessive CPU use when parsing malformed chunk-size lines * bound read allocations fo…
A press release from the Cybersecurity and Infrastructure Security Agency (CISA) today: Today, the Cybersecurity and Infrastructure Security Agency (CISA) unve…
Sergiu Gatlan reports: Binance, the world’s largest crypto exchange, has denied claims of a new security breach made by a threat actor using the ‘ShinyHunters’…
AI agents are taking over routine governance, risk, and compliance tasks, forcing GRC professionals to rethink the skills needed to stay relevant. Anecdotes ex…
A single attacker using AI agents pulled emergency dispatch records covering seven Taipei districts, researchers at Acronis's Threat Research Unit said last we…
BeakSec discovered that Telegram Desktop, a fast and secure messaging application, contains an IPC record-separator injection vulnerability. It allows a remote…
Spreadsheet::XLSX 0.20 Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata. Security: val…
Spreadsheet::XLSX 0.20 Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata. Security: val…
Spreadsheet::XLSX 0.20 Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata. Security: val…
A buffer overflow was discovered in the handling of dBASE database files in LibreOffice, which could potentially result in the execution of arbitrary code. For…
It was discovered that missing validation of event data in the agent of the Puppet configuration management system could result in code execution on the Puppet…
It was discovered that missing validation of event data in the agent of the Puppet configuration management system could result in code execution on the Puppet…
Nicole Wootton-Cane reports: At least 320,000 school files stolen during a cyber attack on Bristol City Council’s servers have been found posted to the dark we…
mSeven Software is warning current and former mSecure password manager customers to change passwords, reset two-factor authentication, and remove passkeys foll…
Apache Arrow gives data tools a shared way to organize information.
Binance on Tuesday said the record-setting theft of $6.43 billion in assets from the world's largest cryptocurrency exchange was the culmination of a "sophisti…
An attacker broke into the update system of the cPGuard security tool on November 2 and used it to send a malicious script to customers' Linux servers. The scr…
Your team is remediating more vulnerabilities than ever, yet your breach risk has barely changed. You’re spending too much time and effort on exposures attacke…
