The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Another software giant has disclosed a security breach that potentially bears a long-term devastating impact.…Codecov Breach Following Supply-Chain Attack Affe…
A remote information leak vulnerability and a remote buffer overflow vulnerability were discovered in ConnMan, which could result in denial of service or the e…
Adversaries are increasingly abusing Telegram as a "command-and-control" system to distribute malware into organizations that could then be used to capture sen…
While Rowhammer attacks are nothing new, another exploitation of the bug has arrived. Dubbed SMASH,…New JavaScript-based SMASH Attack Confirms Rowhammer Bug As…
In its April slate of patches, Microsoft rolled out fixes for a total ofÂ114 security flaws, including an actively exploited zero-day and four remote code exec…
Microsoft has warned organizations of a "unique" attack campaign that abuses contact forms published on websites to deliver malicious links to businesses via e…
In what appears to be a fresh twist in Android malware, users of Gigaset mobile devices are encountering unwanted apps that are being downloaded and installed …
Want to take advantage of excellent cloud services? Amazon Web Services may be the perfect solution, but don't forget about AWS security.Whether you want to us…
In XStream there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed …
An out of bounds read in function QRadialFetchSimd from crafted svg file may lead to information disclosure or other potential consequences. This update includ…
New upstream version (87.0) Release notes are available here - https://www.mozilla.org/en-US/firefox/87.0/releasenotes/
The privacy-focused browser Mozilla Firefox has now introduced another feature to protect users. With the…Mozilla Firefox 87 Out With New Default Referrer Poli…
An out of bounds read in function QRadialFetchSimd from crafted svg file may lead to information disclosure or other potential consequences. This update includ…
An out of bounds read in function QRadialFetchSimd from crafted svg file may lead to information disclosure or other potential consequences. This update includ…
Researchers have discovered three vulnerabilities capable of granting attackers root privileges on Linux systems if they are able to gain access through other …
jquery: Passing HTML containing elements to manipulation methods could result in untrusted code execution (CVE-2020-11023) For more details about the security …
Microsoft has warned about a new strain of mobile ransomware that takes advantage of incoming call notifications and Android's Home button to lock the device b…
A potential Cross-Site Scripting (XSS) vulnerability was found in rails, a ruby based MVC framework. Views that allow the user to control the default (not foun…
Unix and Linux are two operating systems that have many significant overlapping features and, yet, continue to be unique in their own ways. Both Unix- and Linu…
autobuilt v2.1.0, Security fix for CVE-2020-14370 ---- correct release tag on account of prior faulty build_tag macro ---- Add back in capability SYS_CHROOT. -…
autobuilt v2.1.0, Security fix for CVE-2020-14370 ---- correct release tag on account of prior faulty build_tag macro ---- Add back in capability SYS_CHROOT. -…
autobuilt v2.1.0, Security fix for CVE-2020-14370 ---- correct release tag on account of prior faulty build_tag macro ---- Add back in capability SYS_CHROOT. -…
Multiple security issues were discovered in MediaWiki: SpecialUserRights could leak whether a user existed or not, multiple code paths lacked HTML sanitisation…
I am sure that many of you have by now heard of a recently disclosed critical Windows server vulnerability'calledÂZerologon'that could let hackers completely t…