The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Updated busybox packages fix security vulnerability: decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, w…
Google has launched anÂupdated version of Scorecards, its automated security tool that produces a "risk score" for open source initiatives, with improved check…
The recent tsunami of ransomware has brought to life the fears of downtime and data loss cybersecurity pros have warned about, as attacks on the energy sector,…
An issue has been found in ipmitool, an utility for IPMI control with kernel driver or LAN interface. Neglecting proper checking of input data might result in …
OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authe…
A cyber-physical attack is an example of a security breach in cyberspace that impacts the…Tips to Improve Cybersecurity Amidst Cyber Physical Attack on Latest …
Learn 13 Linux security best practices you can follow to avoid privacy risks and data leaks.
It seems like every new day brings with it a new ransomware news item ' new attacks, methods, horror stories, and data being leaked.Ransomware attacks are on t…
An emerging ransomware strain in the threat landscape claims to have breached 30 organizations in just four months since it went operational by riding on the c…
The updated packages fix security vulnerabilities: Out of bounds-read when parsing a `WM_COPYDATA` message. (CVE-2021-29964) Memory safety bugs fixed in Thunde…
Thank you to Oyelakin Timilehin Valentina and Duane Dunston for contributing this article.Threat intelligence (or threat intell) is information used to underst…
Days afterÂMicrosoft,ÂSecureworks, andÂVolexityÂshed light on a new spear-phishing activity unleashed by the Russian hackers who breached SolarWinds IT managem…
The popular resource helping people with managing breached passwords, Have I Been Pwned, brings some…FBI To Share Pwned Passwords With HIBP As It Goes Open Sou…
There is a person in every organization that is the direct owner of breach protection. His or her task is to oversee and govern the process of design, build, m…
Viktor Szakats reported that libcurl, an URL transfer library, does not strip off user credentials from the URL when automatically populating the Referer HTTP …
CloudLinux, a commercially supported OS optimized for hosting service providers and data centers with their own multi-tenanted clients, has announced TuxCare L…
Multiple security issues have been discovered in the PostgreSQL database system, which could result in the execution of arbitrary code or disclosure of memory …
Multiple security issues have been discovered in the PostgreSQL database system, which could result in the execution of arbitrary code or disclosure of memory …
A serious vulnerability recently appeared in another WordPress plugin that could allow extracting sensitive data…SQL Injection Vulnerability Found In CleanTalk…
#### python-markdown2 2.4.0 - [pull #377] Fixed bug breaking strings elements in metadata lists - [pull #380] When rendering fenced code blocks, also add the `…
Updated nvidia-current packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko)…
Updated nvidia390 packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko) wher…
Security researchers have discovered an information disclosure vulnerability in the Linux kernel that can be exploited to leak data, at least on 32-bit Arm dev…
Researchers have discovered a dangerous strain of Linux malware Dubbed " RotaJakiro " that went undetected for three years, enabling its operators to harvest a…