The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security vulnerabilities in remote desktop programs such as Sunlogin and AweSun are being exploited by threat actors to deploy the PlugX malware.AhnLab Securit…
An unknown threat actor created malicious game modes for the Dota 2 multiplayer online battle arena (MOBA) video game that could have been exploited to establi…
Four different Microsoft Azure services have been found vulnerable to server-side request forgery (SSRF) attacks that could be exploited to gain unauthorized a…
Cybersecurity researchers have discovered a security vulnerability that exposes cars from Honda, Nissan, Infiniti, and Acura to remote attacks through a connec…
The maintainers of the FreeBSD operating system have released updates to remediate a security vulnerability impacting the ping module that could be potentially…
The recent OpenSSL updates address two security bugs in the service, including a high-severity vulnerability…Severe Remote Code Execution Vulnerability Riddled…
An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can…
A major security vulnerability existed in the Kubernetes continuous delivery tool Argo CD. Exploiting this…Serious Argo CD Vulnerability Could Allow Admin Acce…
VMware has recently addressed numerous serious security bugs affecting its identity management software Workspace ONE…VMware Patched Workspace ONE Access Softw…
Google's Threat Analysis Group (TAG) took the wraps off a newinitial access brokerthat it said is closely affiliated to a Russian cyber crime gang notorious fo…
Researchers have discoverd a critical-severity bug in the opensource tool Parse Server. Exploiting this server…Critical Remote Code Execution Vulnerability Fou…
Researchers have recently disclosed details about multiple security vulnerabilities in Extensis Portfolio software. These include…Extensis Portfolio Vulnerabil…
Researchers have found a high-severity bug in Apache Cassandra allowing code execution attacks. Since the…Remote Code Execution Bug Found In Apache Cassandra –…
xorg-x11-server: SProcRenderCompositeGlyphs out-of-bounds access (CVE-2021-4008) * xorg-x11-server: SProcXFixesCreatePointerBarrier out-of-bounds access (CVE-2…
Researchers from Cisco Talos have elaborated on the security vulnerability they discovered in Garret metal…Vulnerabilities In Garrett Walk-Through Metal Detect…
At least 300,000 IP addresses associated with MikroTik devices have been found vulnerable to multiple remotely exploitable security vulnerabilities that have s…
The package grafana before version 8.2.4-1 is vulnerable to access restriction bypass.
A critical Linux kernel bug (CVE-2021-43267) exists in a TIPC message type that allows Linux nodes to send cryptographic keys to each other, and could allow re…
The CISA recently urged developers to update Discourse versions 2.7.8 and earlier, warning of a critical remote code execution (RCE) vulnerability ( CVE-2021-4…
Multiple security vulnerabilities have been disclosed in softphone software from Linphone and MicroSIP that could be exploited by an unauthenticated remote adv…
New vulnerabilities have been discovered in Fortress S03 Wi-Fi Home Security System that could be potentially abused by a malicious party to gain unauthorized …
Popular e-commerce platform Shopify had a simple yet serious vulnerability that could have devastating results.…Critical Shopify Vulnerability Exposed GitHub A…
It looks like the Print Spooler fiasco continues as more bugs surface online, triggering different…New Windows Print Spooler Zero-Day Bug Triggers Remote Attac…
The Wi-Fi network name bug that was found to completely disable an iPhone's networking functionality had remote code execution capabilities and was silently fi…