Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Google has launched anÂupdated version of Scorecards, its automated security tool that produces a "risk score" for open source initiatives, with improved check…
The recent tsunami of ransomware has brought to life the fears of downtime and data loss cybersecurity pros have warned about, as attacks on the energy sector,…
An issue has been found in ipmitool, an utility for IPMI control with kernel driver or LAN interface. Neglecting proper checking of input data might result in …
OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authe…
Learn 13 Linux security best practices you can follow to avoid privacy risks and data leaks.
It seems like every new day brings with it a new ransomware news item ' new attacks, methods, horror stories, and data being leaked.Ransomware attacks are on t…
The updated packages fix security vulnerabilities: Out of bounds-read when parsing a `WM_COPYDATA` message. (CVE-2021-29964) Memory safety bugs fixed in Thunde…
Thank you to Oyelakin Timilehin Valentina and Duane Dunston for contributing this article.Threat intelligence (or threat intell) is information used to underst…
Amazon's experiment wireless mesh networking has turned users into guinea pigs. If you use Alexa, Echo, or any other Amazon device, you have only 10 days to op…
The U.S. Department of Justice (DoJ) indicted an employee of the Federal Bureau of Investigation (FBI) for illegally removing numerous national security docume…
The U.S. Department of Justice (DoJ) indicted an employee of the Federal Bureau of Investigation (FBI) for illegally removing numerous national security docume…
Just as Colonial PipelineÂrestoredÂall of its systems to operational status in the wake of a crippling ransomware incident a week ago, DarkSide, the cybercrime…
Viktor Szakats reported that libcurl, an URL transfer library, does not strip off user credentials from the URL when automatically populating the Referer HTTP …
CloudLinux, a commercially supported OS optimized for hosting service providers and data centers with their own multi-tenanted clients, has announced TuxCare L…
Multiple security issues have been discovered in the PostgreSQL database system, which could result in the execution of arbitrary code or disclosure of memory …
Multiple security issues have been discovered in the PostgreSQL database system, which could result in the execution of arbitrary code or disclosure of memory …
A serious vulnerability recently appeared in another WordPress plugin that could allow extracting sensitive data…SQL Injection Vulnerability Found In CleanTalk…
#### python-markdown2 2.4.0 - [pull #377] Fixed bug breaking strings elements in metadata lists - [pull #380] When rendering fenced code blocks, also add the `…
Updated nvidia-current packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko)…
Updated nvidia390 packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko) wher…
Security researchers have discovered an information disclosure vulnerability in the Linux kernel that can be exploited to leak data, at least on 32-bit Arm dev…
Researchers have discovered a dangerous strain of Linux malware Dubbed " RotaJakiro " that went undetected for three years, enabling its operators to harvest a…
Security update - OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured w…
This update is intended to fix two bugs in os-autoinst: a crash on exit that commonly occurs, and a problem that can occur where a dbus-broker per-UID queued d…
