The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lr…
Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lr…
Less privileged Webmin users (excluding those created by Virtualmin and Cloudmin) can modify arbitrary files with root privileges, and so run commands as root …
Researchers from Google found five different zero-day bugs that the notorious Predator spyware exploited to…Predator Spyware Exploited 5 Android Zero-Day Bugs …
Researchers claim to have found a serious security vulnerability affecting Google’s VirusTotal platform that could…Researchers Claim RCE Vulnerability Could Af…
The chromium-browser-stable package has been updated to 99.0.4844.84 that fixes one security vulnerability and many bugs (together with 99.0.4844.82). Type Con…
A researcher has discovered numerous security vulnerabilities affecting Pascom Cloud Phone Systems. Exploiting the bugs…Vulnerabilities In Pascom Phone System …
VMware on Tuesday patched severalhigh-severityvulnerabilitiesimpacting ESXi, Workstation, Fusion, Cloud Foundation, and NSX Data Center for vSphere that could …
Google on Monday rolled out fixes for eight security issues in the Chrome web browser, including a high-severity vulnerability that's being actively exploited …
Lots of people ''run Linux'' without really knowing or caring '' many home routers, navigational aids, webcams and other IoT devices are based on it; the major…
Multiple vulnerabilities were discovered in Cloudflare's RPKI validator, which could result in denial of service or path traversal. For the stable distribution…
Web infrastructure company Cloudflare on Wednesday revealed that threat actors are actively attempting to exploit asecond bugdisclosed in the widely used Log4j…
Chen Zhaojun of Alibaba Cloud Security Team discovered a critical security vulnerability in Apache Log4j, a popular Logging Framework for Java. JNDI features u…
A security researcher from Google Project Zero discovered a critical and easily exploitable “BigSig” vulnerability…Mozilla Patched 'BigSig' Vulnerability That …
Researchers from Google Project Zero have discovered numerous vulnerabilities in the Zoom app that could…Multiple Vulnerabilities Spotted In Zoom Video Confere…
CloudLinux's security platform for Linux-based websites and web servers contains a high-severity PHP deserialization bug, leaving web servers vulnerable to cod…
VMware has shipped updates to address two security vulnerabilities in vCenter Server and Cloud Foundation that could be abused by a remote attacker to gain acc…
Google researchers discovered zero-day affecting macOS devices that could allow recording keystrokes or screen grabs.…MacOS Zero-Day Vulnerability Allowed Keyl…
Google researchers on Thursday disclosed that it found a watering hole attack in late August exploiting a now-patched zero-day in macOS operating system and ta…
Microsoft has published a new advisory warning of a security bypass vulnerability affecting Surface Pro 3 convertible laptops that could be exploited by an adv…
Professional developers want to embrace DevSecOps and write secure code, but their organizations need to support this seachange if they want that effort to gro…
The updated sqlite packages fix a security vulnerability: Use after free in sqlite in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potenti…
Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-3…
Google on Friday rolled out an emergency security patch to its Chrome web browser to address a security flaw that's known to have an exploit in the wild.Tracke…