Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Open Source Intelligence (OSINT), is a tactic used to learn about information relevant to protecting an organization from external and internal threats using p…
A cybersecurity researcher today publicly disclosed technical details and PoC for 4 unpatched zero-day vulnerabilities affecting an enterprise security softwar…
Bernd Edlinger discovered that malformed data passed to the SSL_check_chain() function during or after a TLS 1.3 handshake could cause a NULL dereference, resu…
OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841) (CVE-2020-2803) * OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 82…
From large scale breaches to mere credential stuffing, passwords have always remained on the hitlist of cybercriminals. From two-factor toWorld Economic Forum …
While password managers are meant to protect users' credentials and underlying sensitive data, they do not necessarily warrant fool-proof security.Researchers …
It was reported that python-bleach, a whitelist-based HTML-sanitizing library, is prone to a mutation XSS vulnerability in bleach.clean when strip=False and 'm…
Mozilla: Use-after-free when removing data about origins (CVE-2020-6805) * Mozilla: BodyStream::OnInputStreamReady was missing protections against state confus…
The Coronavirus is hitting hard on the world's economy, creating a high volume of uncertainty within organizations.Cybersecurity firm Cynet today revealed new …
This update upgrades Firefox to version 68.6.0 ESR. * Mozilla: Use-after-free when removing data about origins (CVE-2020-6805) * Mozilla: BodyStream::OnInputSt…
All Intel processors released in the past 5 years contain an unpatchable vulnerability that could allow hackers to compromise almost every hardware-enabled sec…
It was discovered that there was an out-of-bounds write vulnerability in pdfresurrect, a tool for extracting or scrubbing versioning data from PDF documents.
Django could allow unintended access to the database.
This time the firm is an Israeli marketing company Straffic who exposed 49 million emails via an unsecured database. Though,Marketing Firm Straffic Exposed 49 …
An issue has been found in libapache2-mod-auth-openidc, an OpenID Connect authentication module for Apache. Due to insufficient validatation of URLs an Open Re…
Two issues have been found in php5, a server-side, HTML-embedded scripting language. Both issues are related to crafted data that could lead to reading after a…
Antonio Morales discovered an user-after-free flaw in the memory pool allocator in ProFTPD, a powerful modular FTP/SFTP/FTPS server. Interrupting current data …
Updated ipmitool package fix security vulnerability: Christopher Ertl found that multiple functions in ipmitool neglect proper checking of the data received f…
The updated packages fix security vulnerabilities: PackLinuxElf64::unpack in p_lx_elf.cpp in UPX 3.95 allows remote attackers to cause a denial of service (do…
After customer complaints of account hacks, Ring is making two-factor authentication mandatory and is considering allowing users to opt out of sharing their da…
Visibility into an environment attack surface is the fundamental cornerstone to sound security decision making. However, the standard process of 3rd party thre…
Google has abruptly pulled over 500 Chrome extensions from its Web Store that researchers discovered were stealing browsing data and executing click fraud and …
Tom Lane discovered that "ALTER ... DEPENDS ON EXTENSION" sub commands in the PostgreSQL database did not perform authorisation checks. For Debian 8 "Jessie", …
Across the world, almost every single country in the modern world has experienced data security threats and cyber-attacks on theirGlobal Cyber Threats on the R…
