Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
2024 had its fair share of high-profile cyber attacks, with companies as big as Dell and TicketMaster falling victim to data breaches and other infrastructure …
As we Linux security admins continually seek robust and streamlined solutions to enhance our containerized environments , the open-source Flatcar OS emerges as…
Researchers have observed an ongoing phishing attack that exploits Google Calendar to evade security filters.…New Phishing Campaign Exploits Google Calendar To…
As we head into 2025 and reflect back on 2024, Linux security admins' roles and responsibilities are evolving rapidly with defining trends like the pervasive i…
The technology is advancing at an unprecedented rate, fueling cybersecurity concerns. Experts have gone the extra mile to tackle this issue, but they will not …
Agility and scalability are paramount for us Linux security admins, and traditional software deployment methods often fall short in these critical areas. Conta…
Linux security admins must be wary of an emerging and dangerous threat: the cShell DDoS bot malware. Recently discovered by researchers at ASEC, this sophistic…
The developers of Rspack have revealed that two of their npm packages, @rspack/core and @rspack/cli, were compromised in a software supply chain attack that al…
A new social engineering campaign has leveraged Microsoft Teams as a way to facilitate the deployment of a known malware called DarkGate."An attacker used soci…
Linux admins and infosec professionals tasked with safeguarding sensitive communications face increasing risks with emerging privacy threats like China-sponsor…
When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'follow_s…
A critical security vulnerability has been disclosed in SailPoint's IdentityIQ identity and access management (IAM) software that allows unauthorized access to…
Identity-based attacks like login attempts from unusual geographic locations or at unexpected times, as well as enforcing MFA and maintaining detailed logs of …
Identity-based attacks like login attempts from unusual geographic locations or at unexpected times, as well as enforcing MFA and maintaining detailed logs of …
Threat actors with ties to Russia have been linked to a cyber espionage campaign aimed at organizations in Central Asia, East Asia, and Europe.Recorded Future'…
The threat actor known as APT-C-60 has been linked to a cyber attack targeting an unnamed organization in Japan that used a job application-themed lure to deli…
The administrators of the Python Package Index (PyPI) repository have quarantined the package "aiocpa" following a new update that included malicious code to e…
Several security issues were fixed in Waitress.
Recent research on Samba Active Directory (AD) implementations has revealed a critical vulnerability that allows attackers to gain elevated privileges and seiz…
SUSE, an established player in Linux and open-source software development, recently embarked on an unprecedented journey with its announcements at KubeCon Nort…
DoS due to resource exhaustion has been fixed in waitress, a Python Web Server Gateway Interface. For Debian 11 bullseye, this problem has been fixed in version
A newly patched security flaw impacting Windows NT LAN Manager (NTLM) was exploited as a zero-day by a suspected Russia-linked actor as part of cyber attacks t…
Cybersecurity researchers have flagged a new malware campaign that infects Windows systems with a Linux virtual instance containing a backdoor capable of estab…
An update that fixes one vulnerability is now available.
