Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
It was discovered that the Waitress WSGI server was susceptible to HTTP request smuggling in some scenarios when used behind a proxy. For the oldstable distrib…
USN-5311-1 fix was reverted by mistake in containerd.
While vanity URLs have become a convenient way to personalize links, they also risk phishing…Researchers Explain How Exploit Vanity URLs Could Allow Phishing A…
Waitress is a Python WSGI server, an application server for Python web apps. Security updates to fix request smuggling bugs, when combined with another http pr…
An update that solves 5 vulnerabilities and has one errata is now available.
Earlier this month, GitHub suffered a massive security breach affecting numerous users’ accounts. The breach…GitHub Shares Details About The Stolen OAuth User …
Researchers have detected a new variant of the BotenaGo malware attacking DVR devices. This malware…New BotenaGo Malware Variant Executes Stealth Attacks Again…
The Citizen Lab has uncovered another iPhone zero-click bug that NSO exploited to deploy their…New iPhone Zero-Click Bug Exploited In Pegasus Attacks Against C…
An update that fixes one vulnerability is now available.
Containers were incorrectly started with non-empty inheritable Linux process capabilities (CVE-2022-24769) References: - https://bugs.mageia.org/show_bug.cgi?i…
Bancor, the first automated market maker (AMM) on Ethereum, has released Bancor v3 Code on…Bancor Announces a $1 Million Bug Bounty Program ahead of V3 Mainnet…
waitress could be made to expose sensitive information if it received a specially crafted request.
What is Legion Legion is a semi-automated easy to use network penetration testing framework that…Legion By GoVanguard- An Automated Reconnaissance Tool on Late…
The popular password management solution 1Password has announced expanding its highest bounty reward limits. Onwards,…1Password Raise Bug Bounty Rewards To $1 …
Nowadays sometimes hackers are regarded by the non-tech savvy folk as “modern-day magicians” Particularly those…Watch Dogs – An Entertaining Simulation of a Fa…
An Android banking trojan designed to steal credentials and SMS messages has been observed once again sneaking past Google Play Store protections to target use…
containerd would allow unintended access to files over the network.
Researchers have found a new tactic from threat actors to ensure continued access to compromised…SockDetour Found As A Backup Backdoor In TiltedTemple APT Camp…
Researchers from China's Pangu Lab have disclosed details of a "top-tier" backdoor put to use by the Equation Group, an advanced persistent threat (APT) with a…
The Russian government on Thursday warned of cyber attacks aimed at domestic critical infrastructure operators, as the country's full-blown invasion of Ukraine…
The NFT craze has seen collections minted by artists and celebrities from a wide range…New York Stock Exchange Considering NFT Marketplace – Security Remains C…
An update that fixes one vulnerability is now available.
A new version of the MyloBot malware has been observed to deploy malicious payloads that are being used to send sextortion emails demanding victims to pay $2,7…
Continuing their steps towards a better customer experience, the Signal app now brings the “change…Signal App Launches Change Number Feature While Retaining Ol…
