Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A new hacking tool may threaten security approaches as it lands on the dark web.…New MASQ Tool Spoofs Device Fingerprints Allowing Attackers To Bypass Security…
Security fix for CVE-2021-30473 Security fix for CVE-2021-30475 ---- Fix bug with 100% cpu utilization on network link change (or wakeup) when websockets are i…
Cybersecurity researchers on Thursday took the wraps off a new cyber espionage group that has been behind a series of targeted attacks against diplomatic entit…
Researchers have disclosed a new type of attack that exploits misconfigurations in transport layer security (TLS) servers to redirect HTTPS traffic from a vict…
Multiple security issues were discovered in the Rails web framework which could result in denial of service. For the stable distribution (buster), these proble…
Jamie Landeg-Jones and Manfred Paul discovered a buffer overflow vulnerability in NGINX, a small, powerful, scalable web/proxy server. NGINX has a buffer overf…
Cybersecurity researchers from FireEye unmasked additional tactics, techniques, and procedures (TTPs) adopted by Chinese threat actors who were recently found …
Amir Sarabadani and Kunal Mehta discovered that the import functionality of Hyperkitty, the web user interface to access Mailman 3 archives, did not restrict t…
Luis Merino, Markus Vervier and Eric Sesterhenn discovered an off-by-one in Nginx, a high-performance web and reverse proxy server, which could result in denia…
Just as Colonial PipelineÂrestoredÂall of its systems to operational status in the wake of a crippling ransomware incident a week ago, DarkSide, the cybercrime…
The update for prosody released as DSA 4916-1 introduced a regression in websocket support. Updated prosody packages are now available to correct this issue.
An investigation undertaken in the aftermath of theÂOldsmar water plant hackÂearlier this year has revealed that an infrastructure contractor in the U.S. state…
Several vulnerabilities have been discovered in the chromium web browser. CVE-2021-30506
- New upstream version (88.0.1) - Fixes CVE-2021-29952 (https://www.mozilla.org/en-US/security/advisories/mfsa2021-20/) ---- - Fixed WebRTC indicator (mozbz#17…
Several issues were found in Redmine, a project management web application, which could lead to cross-site scripting, information disclosure, and reading arbit…
Colonial Pipeline, which carries 45% of the fuel consumed on the U.S. East Coast, on Saturday said it halted operations due to a ransomware attack,Âonce again …
It was discovered that there was potential directory-traversal vulnerability in Django, a popular Python-based web development framework.
Several vulnerabilities were discovered in mediawiki, a wiki website engine for collaborative work. CVE-2021-20270
Several vulnerabilities have been discovered in the chromium web browser. CVE-2021-21227
Several vulnerabilities have been discovered in the chromium web browser. CVE-2021-21201
The CrowdSec team is expanding the capabilities of their open-source and free security solution by finalizing the release of its brand new application bouncer …
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
SonicWall has addressed three critical security vulnerabilities in its hosted and on-premises email security (ES) product that are being actively exploited in …
Google on Tuesday released a new version of Chrome web-browsing software for Windows, Mac, and Linux with patches for two newly discovered security vulnerabili…
