Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Researchers have detected active attacks from TellYouThePass ransomware that exploits the recently reported PHP flaw.…Recently Patched PHP Flaw Under Attack By…
The security risks posed by the Pickle format have once again come to the fore with the discovery of a new "hybrid machine learning (ML) model exploitation tec…
Ethical hacking, or analyzing a system without permission to try and discover vulnerabilities that hackers can use, is an essential part of maintaining robust …
JetBrains has alerted users to a critical vulnerability in its GitHub plugin for IntelliJ platforms,…JetBrains GitHub Plugin Vulnerability Affects IntelliJ IDE…
This week marked the release of the monthly Patch Tuesday updates for Microsoft users, rolling…Microsoft June 2024 Patch Tuesday Update Fixed ~50 Vulnerabiliti…
Threat actors linked to the Black Basta ransomware may have exploited a recently disclosed privilege escalation flaw in the Microsoft Windows Error Reporting S…
Researchers have discovered a serious remote code execution vulnerability affecting PHP installations. As observed, this…Upgrade Your PHP Installations for A C…
Arm is warning of a security vulnerability impacting Mali GPU Kernel Driver that it said has been actively exploited in the wild.Tracked as CVE-2024-4610, the …
python-idna security update
Microsoft is warning about the potential abuse of Azure Service Tags by malicious actors to forge requests from a trusted service and get around firewall rules…
Progress patched a critical authentication bypass flaw impacting its Telerik Report Server. The vulnerability appeared…Critical Auth Bypass Flaw Affected Progr…
Despite a working patch that has been around for years, the Apache Log4j2 vulnerability still…Apache Log4j2 Vulnerability Remains A Threat For Global Finance o…
The Ubuntu security team has recently discovered and addressed multiple vulnerabilities in the Apache HTTP Server (apache2). These vulnerabilities could potent…
Threat actors are increasingly abusing legitimate and commercially available packer software such as BoxedApp to evade detection and distribute malware such as…
Zyxel has released security updates to address critical flaws impacting two of its network-attached storage (NAS) devices that have currently reached end-of-li…
Popular video-sharing platform TikTok has acknowledged a security issue that has been exploited by threat actors to take control of high-profile accounts on th…
Researchers uncovered a new wave of malware attacks against WordPress websites, exploiting known XSS vulnerabilities…XSS Flaws In Multiple WordPress Plugins Ex…
Heads up WordPress admins. If you’ve been running Dessky Snippets plugin on your WordPress e-stores,…Dessky Snippets WordPress Plugin Exploited For Card Skimmi…
CISA warned users of a severe vulnerability in Linux under active attack. While the vulnerability…CISA Adds A Linux Vulnerability To Its Known Exploits Catalog…
The Kinsing hacker group, or H2Miner, has been orchestrating illicit cryptocurrency mining campaigns since 2019 and poses a persistent security threat. The gro…
Recently conducted research by Kaspersky indicates an alarming rise in cyberattacks using exploits against Linux systems. Data from Kaspersky Security Network …
Cisco recently addressed a high-severity vulnerability in its Firepower Management Center software with the latest…Severe Vulnerability Fixed In Cisco Firepowe…
WhatsApp engineers share their fears about the app being vulnerable to government monitoring via n…WhatsApp Chats Vulnerable To Government Monitoring – Report …
The threat actors behind the CatDDoS malware botnet have exploited over 80 known security flaws in various software over the past three months to infiltrate vu…
