Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple high-impact security issues have been discovered in Thunderbird, which could result in denial of service (DoS) attacks leading to server crashes and l…
Remote code execution on feed enrichment. If "Extract full content from HTML5 and Google AMP" has been enabled for one or more feed subscriptions it is possibl…
The zero-day exploitation of a now-patched medium-severity security flaw in the FortinetFortiOSoperating system has been linked to a suspected Chinese hacking …
Google is calling attention to a set of severe security flaws in Samsung's Exynos chips, some of which could be exploited remotely to completely compromise a p…
It was discovered that there was a potential remote denial of service vulnerability in redis, a popular key-value database. Authenticated users could have used…
More than a dozen security flaws have been disclosed in E11, a smart intercom product made by Chinese company Akuvox."The vulnerabilities could allow attackers…
A change in the libreswan 4.2 Traffic Selector parsing code introduced a missing check that would reject palformed Traffic Selector payloads. As such, in such …
A researcher highlighted a vulnerability in Snapchat that could allow a remote attacker to delete…Snapchat Vulnerability Could Allow Deleting Users’ Content Sp…
The Trusted Platform Module (TPM) 2.0 specification is affected by two buffer overflow vulnerabilities that could allow attackers to access or overwrite sensit…
As a primary working interface, the browser plays a significant role in today's corporate environment. The browser is constantly used by employees to access we…
A vulnerability have been found in libgit2, a cross-platform, linkable library implementation of Git, which may result in remote code execution when cloning a …
Cisco has rolled out security updates to address a critical flaw reported in the ClamAV open source antivirus engine that could lead to remote code execution o…
ClamAV 0.103.8 is a critical patch release with the following fixes: * CVE-2023-20032 : Fixed a possible remote code execution vulnerability in the HFS+ file p…
Multiple security vulnerabilities were discovered in snort, a flexible Network Intrusion Detection System, which could allow an unauthenticated, remote attacke…
Security researchers have disclosed two new vulnerabilities affecting Schneider Electric Modicon programmable logic controllers (PLCs) that could allow for aut…
HAProxy could allow unintended access to network services.
Two vulnerabilities were discovered in HAProxy, a fast and reliable load balancing reverse proxy, which may result in denial of service, or bypass of access co…
Multiple security vulnerabilities were discovered in snort, a flexible Network Intrusion Detection System, which could allow an unauthenticated, remote attacke…
This update fixes multiple file format validation vulnerabilities that could result in memory access violations such as buffer overflows and floating point exc…
A set of 38 security vulnerabilities has been uncovered in wireless industrial internet of things (IIoT) devices from four different vendors that could pose a …
Threat actors are leveraging known flaws in Sunlogin software to deploy the Sliver command-and-control (C2) framework for carrying out post-exploitation activi…
Improper restrictions in CORBA deserialization. (CVE-2023-21830) Handshake DoS attack against DTLS connections. (CVE-2023-21835) Soundbank URL remote loading. …
Two new security weaknesses discovered in several electric vehicle (EV) charging systems could be exploited to remotely shut down charging stations and even ex…
Atlassian has released fixes to resolve a critical security flaw in Jira Service Management Server and Data Center that could be abused by an attacker to pass …
