Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Researchers from Cisco Talos have elaborated on the security vulnerability they discovered in Garret metal…Vulnerabilities In Garrett Walk-Through Metal Detect…
It's been nearly two years in the making since Intel posted FGKASLR patches for improving Linux kernel security. While that work on Finer Grained / Function Gr…
The Apache Software Foundation (ASF) on Tuesday rolled out fresh patches to contain an arbitrary code execution flaw in Log4j that could be abused by threat ac…
Cybersecurity agencies from Australia, Canada, New Zealand, the U.K., and the U.S. on Wednesday released a joint advisory in response to widespread exploitatio…
A short-lived phishing campaign has been observed taking advantage of a novel exploit that bypassed a patch put in place by Microsoft to fix a remote code exec…
The popular software editor DaVinci Resolve had some serious security vulnerabilities leading to code execution.…Code Execution Vulnerabilities Fixed In DaVinc…
The Cupertino giant has addressed a severe Gatekeeper bypass vulnerability affecting macOS devices. Exploiting the…Apple Patched a macOS Gatekeeper Bypass Vuln…
The newly discovered BLISTER malware loader leverages valid code signing certificates to evade detection. Consequently,…New BLISTER Malware Loader Exploits Val…
As Log4j vulnerability continues to haunt the internet world, more bug scanners have surfaced online…US CISA, CrowdStrike Release Free Log4j Scanners on Latest…
A new addition to the ransomware gang has surfaced online targeting systems with a distinct…New AvosLocker Ransomware Exploits AnyDesk, Reboots System In Safe …
A security researcher discovered a serious subdomain takeover vulnerability in the WordPress hosting platform Flywheel.…Subdomain Takeover Flaw Affected Flywhe…
A researcher from Google Project Zero Team discovered a site isolation bypass vulnerability affecting the…Researcher Discovered Site Isolation Bypass In Google…
Apple recently fixed a security vulnerability in the macOS operating system that could be potentially exploited by a threat actor to "trivially and reliably" b…
Threat actors now exploit the critical Apache Log4j vulnerability named Log4Shell to infect vulnerable devices with the notorious Dridex banking trojan or Mete…
Researchers have discovered at least four different vulnerabilities in the Microsoft Teams link preview feature.…Multiple Vulnerabilities Found In Microsoft Te…
Microsoft said it won't be fixing or is pushing patches to a later date for three of the four security flaws uncovered in its Teams business communication plat…
Researchers have disclosed security vulnerabilities in handover, a fundamental mechanism that undergirds modern cellular networks, which could be exploited by …
Shedding light on alternative exploit strategies for the chaotic Log4j vulnerability, researchers have devised a…New Log4j Attack Vector Exploits WebSocket To …
The terrible Log4j bug mayhem goes on as the Belgium Defense Ministry has emerged as…Hackers Targeted Belgium Defense Ministry Exploiting Log4j Bug on Latest H…
A researcher discovered a security vulnerability affecting Meta’s Facebook platform, winning him a hefty bounty.…An IDOR Bug In Facebook Android Could Expose P…
A few days ago, a serious new vulnerability was identified in Apache log4j v2 and published as CVE-2021-44228 . We were one of the first security companies to …
Apache has released another update shortly after the second Log4j update addressing a previously “incomplete…Apache Releases Third Major Log4j Update To Fix A …
After nearly two years of adopting major network and security changes wrought by COVID-19 and hybrid work, weary IT network and security teams didn't need anot…
Security researchers have warned users that attackers are attempting to exploit a critical vulnerability in the Java logging library Apache Log4j. Log4j is a w…
