Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The Apache Software Foundation (ASF) on Tuesday rolled out fresh patches to contain an arbitrary code execution flaw in Log4j that could be abused by threat ac…
Cybersecurity agencies from Australia, Canada, New Zealand, the U.K., and the U.S. on Wednesday released a joint advisory in response to widespread exploitatio…
The popular software editor DaVinci Resolve had some serious security vulnerabilities leading to code execution.…Code Execution Vulnerabilities Fixed In DaVinc…
A security researcher discovered a serious subdomain takeover vulnerability in the WordPress hosting platform Flywheel.…Subdomain Takeover Flaw Affected Flywhe…
Security fix for CVE-2021-44224, CVE-2021-44790
Researchers have disclosed security vulnerabilities in handover, a fundamental mechanism that undergirds modern cellular networks, which could be exploited by …
Security fix for CVE-2021-4076
Security fix for CVE-2021-4076
This update provides log4j 2.16.0, to address the critical vulnerability CVE-2021-44228 ("Log4Shell"). Note with 2.16.0, JNDI is entirely disabled by default; …
This update provides log4j 2.16.0, to address the critical vulnerability CVE-2021-44228 ("Log4Shell"). Note with 2.16.0, JNDI is entirely disabled by default; …
A researcher discovered a security vulnerability affecting Meta’s Facebook platform, winning him a hefty bounty.…An IDOR Bug In Facebook Android Could Expose P…
A few days ago, a serious new vulnerability was identified in Apache log4j v2 and published as CVE-2021-44228 . We were one of the first security companies to …
Security researchers have warned users that attackers are attempting to exploit a critical vulnerability in the Java logging library Apache Log4j. Log4j is a w…
Cybersecurity researchers have discovered an entirely new attack vector that enables adversaries to exploit the Log4Shell vulnerability on servers locally by u…
Security fix for CVE-2021-4008, CVE-2021-4009, CVE-2021-4010, CVE-2021-4011
xwayland 21.1.4 Security fix for CVE-2021-4008, CVE-2021-4009, CVE-2021-4010, CVE-2021-4011 Store EGLcontext to avoid superfluous eglMakeCurrent() calls Prefer…
Security researchers have warned users that attackers are attempting to exploit a critical vulnerability in the Java logging library Apache Log4j. Log4j is a w…
This Tuesday marked the release of the last security updates from Microsoft for the year…Microsoft December Patch Tuesday Out With 67 Bug Fixes Including A Zer…
Given the rise in malicious and buggy drivers risking system security, Microsoft has developed an…Microsoft Launch Vulnerable And Malicious Driver Reporting Ce…
Microsoft has rolled outPatch Tuesday updatesto address multiple security vulnerabilities in Windows and other software, including one actively exploited flaw …
Romanian cybersecurity technology company Bitdefender on Monday revealed that attempts are being made to target Windows machines with a novel ransomware family…
As the critical “Log4Shell” bug stirs up the internet, the cybersecurity community is rushing for…‘Vaccine’ For Apache Log4j Vulnerability Released Amidst Acti…
Threat actors are actively weaponizing unpatched servers affected by the newly identified "Log4Shell" vulnerability in Log4j to install cryptocurrency miners, …
Threat actors are actively weaponizing unpatched servers affected by the newly identified "Log4Shell" vulnerability in Log4j to install cryptocurrency miners, …
