Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A newly disclosed security vulnerability in the Kubernetes container engine CRI-O calledcr8escapecould be exploited by an attacker to break out of containers a…
A Russian-speaking ransomware outfit likely targeted an unnamed entity in the gambling and gaming sector in Europe and Central America by repurposing custom to…
An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash (CVE-2022-26381). When resi…
Researchers have disclosed three security vulnerabilities affecting Pascom Cloud Phone System (CPS) that could be combined to achieve a full pre-authenticated …
An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash (CVE-2022-26381). When resi…
Overflow in Rat.SetString in math/big can lead to uncontrolled memory consumption (CVE-2022-23772) Incorrect access control in cmd/go (CVE-2022-23773) Incorrec…
Less privileged Webmin users who do not have any File Manager module restrictions configured can access files with root privileges, if using the default Authen…
The primary goal of firewall penetration testing is to prevent unauthorized internet access to your organization's internal network, or check to make sure your…
It was discovered that the SQL plugin in cyrus-sasl2, a library implementing the Simple Authentication and Security Layer, is prone to a SQL injection attack. …
An Android banking trojan designed to steal credentials and SMS messages has been observed once again sneaking past Google Play Store protections to target use…
A bug was found in containerd where containers launched through containerd's CRI implementation with a specially-crafted image configuration could gain access …
Researchers have disclosed details of a new security vulnerability in GitLab, an open-source DevOps software, that could potentially allow a remote, unauthenti…
Researchers have disclosed details of a now-patched security vulnerability in GitLab, an open-source DevOps software, that could potentially allow a remote, un…
containerd would allow unintended access to files over the network.
Researchers have found a new tactic from threat actors to ensure continued access to compromised…SockDetour Found As A Backup Backdoor In TiltedTemple APT Camp…
Cybersecurity agencies from the U.K. and the U.S. have laid bare a new malware used by the Iranian government-sponsored advanced persistent threat (APT) group …
It was discovered that the SQL plugin in cyrus-sasl2, a library implementing the Simple Authentication and Security Layer, is prone to a SQL injection attack. …
Upstream details at : https://access.redhat.com/errata/RHSA-2022:0620
Upstream details at : https://access.redhat.com/errata/RHSA-2022:0609
Upstream details at : https://access.redhat.com/errata/RHSA-2022:0621
Upstream details at : https://access.redhat.com/errata/RHSA-2022:0628
Upstream details at : https://access.redhat.com/errata/RHSA-2022:0666
389-ds-base: double-free of the virtual attribute context in persistent search (CVE-2021-4091) For more details about the security issue(s), including the impa…
Researchers have detailed what they call the "first successful attempt" at decrypting data infected with Hive ransomware without relying on the private key use…
