Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
private-cwd leaks access to the entire filesystem References: - https://bugs.mageia.org/show_bug.cgi?id=30007 - https://github.com/netblue30/firejail/issues/47…
Upstream details at : https://access.redhat.com/errata/RHSA-2022:0473
Hackers could exploit a Linux kernel bug to escape Kubernetes containers and access critical resources; however, the threat is minimized as any attacker needs …
An update that fixes 5 vulnerabilities is now available.
By now, everyone is familiar with terms like “phishing,” “spam,” and “malware.” Most people also…5 Reasons Why Email Is the Top Attack Vector on Latest Hacking…
Microsoft has disclosed details of a large-scale, multi-phase phishing campaign that uses stolen credentials to register devices on a victim's network to furth…
Macros-enabled documents have long been a potent vector for malware threats. Nonetheless, Microsoft now blocks…Microsoft Restricts Excel 4.0 Macros By Default …
David Bouman discovered a heap-based buffer overflow vulnerability in the base64 functions of aide, an advanced intrusion detection system, which can be trigge…
AIDE could be made to crash or run programs as an administrator if it opened a specially crafted file.
An update that fixes one vulnerability is now available.
David Bouman discovered a heap-based buffer overflow vulnerability in the base64 functions of aide, an advanced intrusion detection system, which can be trigge…
AIDE could be made to crash or run programs as an administrator if it opened a specially crafted file.
Cybersecurity teams from Microsoft on Saturday disclosed they identified evidence of a new destructive malware operation dubbed "WhisperGate" targeting governm…
Updated RHEL-8 based Cryostat container images are now available Red Hat Product Security has rated this update as having a security impact of Important. A Com…
This is the second service release to update the new stable version 1.5. It provides a bunch of small fixes and improvements to the OAuth feature as well as a …
Researchers have identified a new phishing attack where the hackers exploit the Google Docs Comment…New Phishing Campaign Exploits Google Docs Comment Feature …
Threat actors leveraged a cloud video hosting service to carry out a supply chain attack on more than100 real estate websitesoperated by Sotheby's Realty that …
Apple recently fixed a security vulnerability in the macOS operating system that could be potentially exploited by a threat actor to "trivially and reliably" b…
Months after the announcement, Microsoft has released end-to-end encryption for all Microsoft Teams users. All…Microsoft Teams End-to-End Encryption Now ‘Gener…
After the disastrous Log4j vulnerability disrupted the online world, another vulnerability surfaced online. It turns…Another Apache Log4j Bug Discovered – Patc…
Cyber threats used to be less threatening. While nobody wants their customers' credit card numbers stolen in a data breach, or to see a deranged manifesto plas…
Europol, the European Union's premier law enforcement agency, hasannouncedthe arrest of a third Romanian national for his role as a ransomware affiliate suspec…
Details have emerged about what's the first Rust-language-based ransomware strain spotted in the wild that has already amassed "some victims from different cou…
Microsoft on Monday announced the seizure of 42 domains used by a China-based cyber espionage group that set its sights on organizations in the U.S. and 28 oth…
