Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Fixed: * A buffer overflow in tss2-rc as CVE-2023-22745. * The drv layer in tss2-rc should have been the policy layer. * Spec deviation in Fapi_GetDescription …
Fixed: * A buffer overflow in tss2-rc as CVE-2023-22745. * The drv layer in tss2-rc should have been the policy layer. * Spec deviation in Fapi_GetDescription …
OpenShift API for Data Protection (OADP) 1.0.7 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Comm…
Multiple bugs affecting millions of vehicles from 16 different manufacturers could be abused to unlock, start, and track cars, plus impact the privacy of car o…
AWS has patched a vulnerability in its Elastic Container Registry (ECR) that was uncovered by Lightspin researcher Gafnit Amiga during an examination of AWS's …
OpenShift API for Data Protection (OADP) 1.1.1 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Comm…
OpenShift API for Data Protection (OADP) 1.0.5 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Comm…
4,000 Google Titan security keys should help to protect critical Python projects from software supply chain attacks.
Globally, there are roughly 30,000 web-based cyberattacks daily, primarily targeting smaller businesses and smaller websites. To put it into perspective, that …
What is GRR? This incident response framework is an open source tool used for live…GRR Rapid Response Github Tool on Latest Hacking News
With web and API security becoming an increasingly important aspect of software development, ''shift left'' is gaining wide acceptance as a best practice to en…
A large number of servers running the Kubernetes API have been left exposed to the internet, which is not great: they're potentially vulnerable to abuse.
A large number of servers running the Kubernetes API have been left exposed to the internet, which is not great: they're potentially vulnerable to abuse.
The container suse/sles/15.4/virt-api was updated. The following patches have been included in this update:
OpenShift API for Data Protection (OADP) 1.0.1 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Comm…
The container suse/sles/15.3/virt-api was updated. The following patches have been included in this update:
This article was written by Peter Gerdenitsch, Group CISO at Raiffeisen Bank International, and is based on a presentation given during Imvision's Executive Ed…
Mozilla has recently announced the removal of two Firefox add-ons with a huge number of…Mozilla Removed Two Popular Firefox Add-Ons For Abusing Their Proxy API…
After serving as a trusted login authenticator for years, Yubico has now stepped up to…Yubico's New Bio Series Security Keys Support Biometric Authentication o…
Researchers have presented a dedicated browser extension, 'TruffleHog,' that can facilitate bug bounty hunters. The…TruffleHog - Now a Browser Extension That D…
The container caasp/v4.5/kube-apiserver was updated. The following patches have been included in this update:
The container caasp/v4.5/kube-apiserver was updated. The following patches have been included in this update:
The notorious Ragnarok ransomware has seemingly shut down its operations. Although the gang didn't appear…Ragnarok Ransomware Released Decryption Keys With No …
The package python-fastapi before version 0.65.2-1 is vulnerable to cross-site request forgery.
