Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Cybersecurity researchers today revealed the existence of a new and previously undetected critical vulnerability in SIM cards that could allow remote attackers…
Estonian based web security startup WebARX, the company who is also behind open-source plugin vulnerability scanner WPBullet and soon-to-be-released bug bounty…
Exim may be the Internet's most popular email server, but the MTA's recent history with security vulnerabilities is concerning to say the least. This past Frid…
Unlike previous side-channel vulnerabilities disclosed in Intel CPUs, researchers have discovered a new flaw that can be exploited remotely over the network wi…
Get your update caps on.Microsoft today released its monthly Patch Tuesday update for September 2019, patching a total of 79 security vulnerabilities in its so…
What could be worse than your router leaking its administrative login credentials in plaintext?Cybersecurity researchers from Trustwave's SpiderLabs have disco…
It's Patch Tuesday again'the day of the month when both Adobe and Microsoft release security patches for vulnerabilities in their software.Adobe has just relea…
About a week ago, the LinuxSecurity staff started tracking a security issue related to VLC, the popular open source media player. Security vulnerabilities are …
There are lots of books on tools and techniques to secure software containers, but what happens when someone discovers a basic architectural flaw? And what do …
A very serious flaw in the Internet's DNS servers may have been ripe for a significant exploit, though a familiar security researcher might have sounded the al…
Even with Apache's focus on producing a secure product, the Web server can still be vulnerable to any number of attacks if you fail to take some security preca…
They have demonstrated that users could open up their router's traffic as a result of visiting a web page loaded with malicious javascript. The researchers sai…
EEye Digital Security has uncovered new security holes affecting a wide range of RealNetworks' media players, the latest desktop-based bugs set to worry IT man…
Three Brisbane university students have discovered a major flaw in wireless network technology that means hackers can bring down critical infrastructure in as …
This week, perhaps the most interesting articles include "Rumors of Third Vulnerability in Linux Kernel Prove Unfounded," "VLANs on Linux," and "Open Source Ge…
Laptops are vulnerable to theft, greatly increasing the likelihood of exposing sensitive files. Unfortunately, storing data in a cryptographic file system does…
Daniel Roberts discovered a binary named "ABfrag" on one of his servers after detecting suspicious network activity. He sent in a note requesting anyone with i…
Vendors have not issued updates yet for a vulnerability just reported by the Squid Project. "Under some conditions Squid may forward the proxy authentication c…
Update: For millions of websites that were vulnerable care of ISS , Apache is not too happy. ISS (Internet Security Systems) released an insufficient patch alo…
There is no doubt that the Internet has brought unparalleled connectivity to computers, especially in the last few years. But ironically, this very advantage h…
The CORE SDI team has found a vulnerability in the SSH 1.5 protocol that allows an attacker to retrieve the session key, which could then allow them to decrypt…
Microsoft today issued a new security advisory warning billions of Windows users of two new critical, unpatched zero-day vulnerabilities that could let hackers…
The Department of Homeland Security and CISA ICS-CERT will today issue a critical security advisory warning about over a dozen newly discovered vulnerabilities…
