Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Ivanti has released security updates to address two security flaws in Endpoint Manager Mobile (EPMM) software that have been chained in attacks to gain remote …
Cybersecurity researchers have detailed the activities of an initial access broker (IAB) dubbed ToyMaker that has been observed handing over access to double e…
A critical security vulnerability has been disclosed in SailPoint's IdentityIQ identity and access management (IAM) software that allows unauthorized access to…
Privileged accounts are well-known gateways for potential security threats. However, many organizations focus solely on managing privileged access—rather than …
A security analysis of the OvrC cloud platform has uncovered 10 vulnerabilities that could be chained to allow potential attackers to execute code remotely on …
Hewlett Packard Enterprise (HPE) has released security updates to address multiple vulnerabilities impacting Aruba Networking Access Point products, including …
Information stealing malware are actively taking advantage of an undocumented Google OAuth endpoint named MultiLogin to hijack user sessions and allow continuo…
Researchers publicly disclosed a design flaw affecting Google Workspace that allows unauthorized access. While they…Google Workspace Design Flaw Allows Unautho…
F5 has alerted customers of a critical security vulnerability impacting BIG-IP that could result in unauthenticated remote code execution.The issue, rooted in …
A financially motivated threat actor has been outed as an initial access broker (IAB) that sells access to compromised organizations for other adversaries to c…
Multiple severe, remotely exploitable security vulnerabilities have been found in Chromium, including out-of-bounds memory access in V8, CSS, and Fonts ( CVE-2…
Details have emerged about a now-patched flaw in OpenSSH that could be potentially exploited to run arbitrary commands remotely on compromised hosts under spec…
Remote work has always been around, but it gained immense popularity in recent years as…Cybersecurity Challenges for Remote Work on Latest Hacking News | Cyber…
Taking another step towards better user privacy, Brave browser limits how websites access local network…Brave Browser Limits Local Resource Access To Enhance U…
Cloud access security brokers (CASBs) have emerged as vital security checkpoints between cloud-based apps and…Why Employ a Cloud Access Security Broker? on Lat…
The tech provider ConnectWise disclosed a severe remote code execution flaw that exposed thousands of…ConnectWise Addressed Remote Code Execution Flaw Risking …
Researchers discovered a prototype pollution vulnerability in the Blitz.js framework that could lead to remote…Blitz.js Framework Vulnerability Could Allow Rem…
Newly discovered vulnerability “Dirty Pipe” vulnerability most Linux distros, giving root access to the attacker…Linux Dirty Pipe Exploit Gives Root Access – P…
As many as seven security vulnerabilities have been disclosed in PTC's Axeda software that could be weaponized to gain unauthorized access to medical and IoT d…
Researchers have disclosed details of critical security vulnerabilities in TerraMaster network-attached storage (TNAS) devices that could be chained to attain …
This tool provides automated setup of rogue access points by setting up a DHCP server…c41n- An Automated Rogue WiFi Access Point Creator on Latest Hacking News
Numerous security vulnerabilities within Victure baby monitor allow unsolicited camera feed access to an adversary.…Vulnerabilities In Victure Baby Monitor All…
Two security flaws riddled the Fortress WiFi home security alarms allowing an adversary to remotely…Fortress Home Security System Flaws Could Allow Remote Disa…
Details have emerged about a new unpatched security vulnerability in Fortinet's web application firewall (WAF) appliances that could be abused by a remote, aut…
