Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The package samba before version 4.22.2-1 is vulnerable to access restriction bypass.
Kirill Firsov discovered that Roundcube, a skinnable AJAX based webmail solution for IMAP servers, was performing PHP Object deserialization on unvalidated inp…
A vulnerability has been discovered in FreeType, which can lead to remote code execution.
The package screen before version 5.0.0-3 is vulnerable to multiple issues including access restriction bypass, denial of service and privilege escalation.
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution.
An Iranian state-sponsored threat group has been attributed to a long-term cyber intrusion aimed at a critical national infrastructure (CNI) in the Middle East…
Cybersecurity researchers have detailed a now-patched vulnerability in Google Cloud Platform (GCP) that could have enabled an attacker to elevate their privile…
A recently disclosed security flaw in Gladinet CentreStack also impacts its Triofox remote access and collaboration solution, according to Huntress, with seven…
Recent vulnerabilities in BeyondTrust Remote Support ( CVE-2024-12356 ) and PostgreSQL ( CVE-2025-1094 ) are being actively exploited by threat actors and requ…
Recent vulnerabilities in BeyondTrust Remote Support ( CVE-2024-12356 ) and PostgreSQL ( CVE-2025-1094 ) are being actively exploited by threat actors and requ…
Cybersecurity researchers have disclosed a new type of name confusion attack called whoAMI that allows anyone who publishes an Amazon Machine Image (AMI) with …
A critical security flaw has been disclosed in the Cacti open-source network monitoring and fault management framework that could allow an authenticated attack…
Multiple security vulnerabilities have been disclosed in GitHub Desktop as well as other Git-related projects that, if successfully exploited, could permit an …
Sophos users must ensure that their firewall devices are updated with the latest updates, as…Sophos Firewall Vulnerabilities Could Allow Remote Attacks on Late…
Details have emerged about a now-patched security flaw in Styra's Open Policy Agent (OPA) that, if successfully exploited, could have led to leakage of New Tec…
A critical security flaw has been disclosed in the Kubernetes Image Builder that, if successfully exploited, could be abused to gain root access under certain …
A critical security flaw has been disclosed in the NVIDIA Container Toolkit that, if successfully exploited, could allow threat actors to break out of the conf…
A vulnerability has been found in ZNC which could result in remote code execution.
SolarWinds has issued patches to address a new security flaw in its Web Help Desk (WHD) software that could allow remote unauthenticated users to gain unauthor…
A vulnerability has been discovered in Ruby on Rails, which can lead to remote code execution via serialization of data.
A vulnerability has been discovered in Levenshtein, which could lead to a remote code execution.
A recently patched security flaw impacting VMware ESXi hypervisors has been actively exploited by "several" ransomware groups to gain elevated permissions and …
Response from ServiceNow: Based on our investigation to date, we have not observed evidence that…ServiceNow Remote Code Execution Vulnerabilities Under Attack …
WordPress admins must update their websites with the latest ProfileGrid plugin release. A severe privilege…ProfileGrid WordPress Plugin Vulnerability Could All…
