Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
**PHP version 7.4.23** (26 Aug 2021) **Core:** * Fixed bug php#72595 (php_output_handler_append illegal write access). (cmb) * Fixed bug php#66719 (Weird behav…
**PHP version 7.4.23** (26 Aug 2021) **Core:** * Fixed bug php#72595 (php_output_handler_append illegal write access). (cmb) * Fixed bug php#66719 (Weird behav…
Close to 14 million Linux-based systems are directly exposed to the Internet, making them a lucrative target for an array of real-world attacks that could resu…
A serious vulnerability in the SEOPress plugin posed a threat to thousands of WordPress websites.…SEOPress WordPress Plugin Vulnerability Potentially Risked Ov…
A North Korean threat actor has been discovered taking advantage of two exploits in Internet Explorer to infect victims with a custom implant as part of a stra…
A nascent information-stealing malware sold and distributed on underground Russian underground forums has been written in Rust, signalling a new trend where th…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Global IT consultancy giant Accenture has become the latest company to be hit by the LockBit ransomware gang, according to a post made by the operators on thei…
Firefox could be made to crash or run programs as your login if it opened a malicious website.
Thorsten Glaser and Axel Beckert reported that lynx, a non-graphical (text-mode) web browser, does not properly handle the userinfo subcomponent of a URI, whic…
Networking equipment major Cisco has rolled out patches to address critical vulnerabilities impacting its Small Business VPN routers that could be abused by a …
Multiple vulnerabilities were discovered in Jetty, a Java servlet engine and webserver which could result in cross-site scripting, information disclosure, priv…
One security issue affects WordPress, a weblog manager, versions between 3.7 and 5.7. This update fixes the following security issues: Object injection in PHPM…
A cyber attack that derailed websites of Iran's transport ministry and its national railway system earlier this month, causing widespread disruptions in train …
ooooooo_q discovered that the actionpack_page-caching Ruby gem, a static page caching module for Rails, allows an attacker to write arbitrary files to a web se…
A software package available from the official NPM repository has been revealed to be actually a front for a tool that's designed to steal saved passwords from…
Several vulnerabilities were discovered in lemonldap-ng, a Web-SSO system. The flaws could result in information disclosure, authentication bypass, or could al…
A popular malware known for stealing sensitive information from Windows machines has evolved into a new strain capable of also targeting Apple's macOS operatin…
REvil, the infamous ransomware cartel behind some of the biggest cyberattacks targeting JBS and Kaseya, has mysteriously disappeared from the dark web, leading…
A malicious webpage could have triggered a use-after-free in accessibility features of a document, causing memory corruption and a potentially exploitable cras…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Mozilla Firefox 90 is now available to Linux users for download, removing built-in FTP (File Transfer Protocol) support, and introducing support for Fetch Meta…
An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this vulnerability to …
