Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A type confusion issue that may have been actively exploited has been identified in the WebKitGTK web engine (CVE-2023-32439). With a low attack complexity and…
Microsoft on Tuesday released updates to address a totalof 130 new security flawsspanning its software, including six zero-day flaws that it said have been act…
Microsoft on Tuesday released updates to address a totalof 132 new security flawsspanning its software, including six zero-day flaws that it said have been act…
A potential Cross Site Scripting (XSS) vulnerablity (CVE-2022-36180) and session handling vulnerability (CVE-2022-36179 )have been found in fusiondirectory, a …
Google has released its monthly security updates for the Android operating system, addressing 46 new software vulnerabilities. Among these, three vulnerabiliti…
Details have emerged about a now-patched actively exploited security flaw in Microsoft Windows that could be abused by a threat actor to gain elevated privileg…
Details have emerged about a now-patched actively exploited security flaw in Microsoft Windows that could be abused by a threat actor to gain elevated privileg…
US CISA recently issued an alert, warning Samsung users about an ASLR bypass flaw being…Samsung ASLR Bypass Flaw Is Actively Exploited – Warns CISA on Latest H…
A security vulnerability has been disclosed in the popular WordPress pluginEssential Addons for Elementorthat could be potentially exploited to achieve elevate…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasaddedthree flaws to the Known Exploited Vulnerabilities (KEV) catalog, based on evidence of…
Google on Friday released out-of-band updates to resolve an actively exploited zero-day flaw in its Chrome web browser, making it the first such bug to be addr…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasaddedtwo vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, based on evi…
It's the second Tuesday of the month, and Microsoft has released another set of security updates to fixa total of 97 flawsimpacting its software, one of which …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday addedfive security flawsto its Known Exploited Vulnerabilities (KEV) catalog, citing…
A serious vulnerability existed in the popular WordPress plugin Elementor Pro that could allow website…Severe Elementor Pro WP Plugin Vulnerability Actively Ex…
Microsoft's Patch Tuesday update for March 2023 is rolling out with remediations for a set of80 security flaws, two of which have come under active exploitatio…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasaddeda high-severity flaw affecting the ZK Framework to its Known Exploited Vulnerabilities…
Car makers Hyundai and Kia have rolled out an emergency update for multiple car models,…Hyundai, Kia Release An Emergency Patch For an Actively Exploited Vulne…
Microsoft on Tuesday releasedsecurity updatesto address 75 flaws spanning its product portfolio, three of which have come under active exploitation in the wild…
Apple has backported fixes for a recently disclosed critical security flaw affecting older devices, citing evidence of active exploitation.The issue, tracked a…
Malicious actors are actively attempting to exploit a recently patched critical vulnerability in Control Web Panel (CWP) that enables elevated privileges and u…
Malicious actors are actively attempting to exploit a recently patched critical vulnerability in Control Web Panel (CWP) that enables elevated privileges and u…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasaddedtwo years-old security flaws impacting TIBCO Software's JasperReports product to its K…
The U.S. National Security Agency (NSA) on Tuesdaysaida threat actor tracked as APT5 has been actively exploiting a zero-day flaw in Citrix Application Deliver…
