Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Microsoft'sPatch Tuesday updatefor the month of March has been made officially available with 71 fixes spanning across its software products such as Windows, O…
Three high-impact security vulnerabilities have been disclosed inAPC Smart-UPS devicesthat could be abused by remote adversaries as a physical weapon to access…
Three high-impact security vulnerabilities have been disclosed inAPC Smart-UPS devicesthat could be abused by remote adversaries as a physical weapon to access…
Newly discovered vulnerability “Dirty Pipe” vulnerability most Linux distros, giving root access to the attacker…Linux Dirty Pipe Exploit Gives Root Access – P…
As many as seven security vulnerabilities have been disclosed in PTC's Axeda software that could be weaponized to gain unauthorized access to medical and IoT d…
Researchers have discovered a severe bug in the Safari 15 browser that potentially leaks a…Safari 15 Browser Vulnerability Potentially Exposes User Data – Appl…
A dependency used to extract docker/OCI image layers can be tricked into modifying host files by creating a malicious layer that has a symlink with the name ".…
After the disastrous Log4j vulnerability disrupted the online world, another vulnerability surfaced online. It turns…Another Apache Log4j Bug Discovered – Patc…
Mozilla is beginning to roll out Firefox 95 with a new sandboxing technology called RLBox that prevents untrusted code and other security vulnerabilities from …
Months after researchers detailed Braktooth bugs, they now have released the PoC exploit to the…US CISA Pushes Vendors For BrakTooth Patches After PoC Goes Pub…
A critical Linux kernel bug (CVE-2021-43267) exists in a TIPC message type that allows Linux nodes to send cryptographic keys to each other, and could allow re…
Despite security measures in place, researchers have found how to analyze and exploit Bluetooth transmissions…Tracking Mobile Devices by Analyzing Bluetooth Tr…
Recently, Google has released another major update for Chrome users. The new update addresses a…Google Chrome Patched Another Zero-Day Bug Within A Month on La…
A researcher found critical security vulnerabilities in the Motorola Halo+ baby monitor. Exploiting this flaw…Serious RCE Vulnerabilities Found In Motorola Hal…
Azure users running Linux VMs may not be aware they have a severely vulnerable piece of management software installed on their machine by Microsoft, which can …
Two security flaws riddled the Fortress WiFi home security alarms allowing an adversary to remotely…Fortress Home Security System Flaws Could Allow Remote Disa…
A new ransomware family that emerged last month comes with its own bag of tricks to bypass ransomware protection by leveraging a novel technique called "interm…
Microsoft has recently fixed a severe vulnerability that could allow PetiPotam NTLM relay attacks. However,…LockFile Ransomware Exploits PetiPotam To Attack Wi…
Details have emerged about a new unpatched security vulnerability in Fortinet's web application firewall (WAF) appliances that could be abused by a remote, aut…
A day after releasingÂPatch Tuesday updates, Microsoft acknowledged yet another remote code execution vulnerability in the Windows Print Spooler component, add…
While the 'Forgot Password' feature in web and mobile apps is meant for convenience, it…Numerous web apps found vulnerable to DNS cache poisoning via 'forgot p…
A newly uncovered security flaw in the Windows operating system can be exploited to coerce remote Windows servers, including Domain Controllers, to authenticat…
Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file" …
After fixing many zero-day bugs already, Google has more to do with Chrome after another…Google Patched Another Actively Exploited Chrome Zero-Day on Latest Ha…
