The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
There is a person in every organization that is the direct owner of breach protection. His or her task is to oversee and govern the process of design, build, m…
Included in Log4j 1.2, a logging library for Java, is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to re…
Your data is worth more than you can imagine, and this is why advertisers turn to all kinds of tactics to collect information about you, including a method tha…
When pasting a tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into c…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, data exfiltrati…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, data exfiltrati…
If you've been keeping up with recent security news, you are most likely aware of the heated worldwide debate about encryption that is currently underway. Stro…
January 14, 2020, is a day cybersecurity stakeholders should pay attention to, as it marks the end of Microsoft support in Windows 7.From a security perspectiv…
The updated packages fix security vulnerabilities: When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file,…
Updated pdfresurrect package fixes security vulnerabilities: A vulnerability was found in PDFResurrect 0.15 has a buffer overflow via a crafted PDF file becau…
The updated packages fix security vulnerabilities: Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to …
Thanks to a statewide policy banning law enforcement use of facial recognition for three years, several agencies in San Diego will lose access to a database of…
Cybercriminals are busy innovators, adapting their weapons and attack strategies, and ruthlessly roaming the web in search of their next big score.Every manner…
Red Hat Ansible Tower 3.6.2-1 - RHEL7 Container 2. Description: * Added a command to generate a new SECRET_KEY and rekey the database * Removed the guest user …
Red Hat Ansible Tower 3.5.4-1 - RHEL7 Container 2. Description: * Added a command to generate a new SECRET_KEY and rekey the database * Removed the guest user…
A vulnerability was discovered in the SPIP publishing system, which could result in unauthorised writes to the database by authors. The oldstable distribution …
A team of cybersecurity researchers demonstrated a novel yet another technique to hijack Intel SGX, a hardware-isolated trusted space on modern Intel CPUs that…
Applications using libpcap could be made to crash if given specially crafted data.
Libidn 2.3.0 (released 2019-11-14) has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced in 2.2.0 (commit 241e8f48) * Update the data…
If your Firefox or Chrome browser has any of the below-listed four extensions offered by Avast and its subsidiary AVG installed, you should disable or remove t…
Final Recon is a useful tool for gathering data about a target from open source resources, the tool is writtenFinalRecon - An All In One OSINT Tool for Web Rec…
Pressure is gathering for a federal privacy law in the US with the introduction of a second bill that would protect consumer data. TheÂConsumer Online Privacy …
IBM has spoken out against Australia's controversial 'anti-encryption' laws, claiming they undermine previous work to strengthen the country's defenses.ÂThe ve…
Libidn 2.3.0 (released 2019-11-14) has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced in 2.2.0 (commit 241e8f48) * Update the data…