The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Video call API and virtual meetings have become the bread and butter of today’s remote…Virtual Meetings Security with Token Authentication on Latest Hacking Ne…
It was discovered that authenticated API users of Orthanc, a DICOM server for medical imaging, could overwrite arbitrary files and in some setups execute arbit…
Microsoft is warning of the threat malicious cyber actors pose tostadium operations, noting that the cyber risk surface of live sporting events is "rapidly exp…
Multiple significant security vulnerabilities have been discovered in the Linux kernel, including a remotely exploitable null pointer dereference flaw in the n…
Ivanti is warning users to update their Endpoint Manager Mobile (EPMM) mobile device management software (formerly MobileIron Core) to the latest version that …
The source package ocsinventory-server, a Hardware and software inventory tool has been updated to address the API change in php-cas due to CVE-2022-39369, see…
Cybersecurity researchers have unearthed an attack infrastructure that's being used as part of a "potentially massive campaign" against cloud-native environmen…
With the rapid growth of technology and the increasing importance of data, securing your organization’s…Optimizing Network Security for Administrators on Lates…
Jose Gomez discovered that the Catalog API endpoint in the Docker registry implementation did not sufficiently enforce limits, which could result in denial of …
A critical security vulnerability has been disclosed in the Open Authorization (OAuth) implementation of the application development framework Expo.io.The shor…
A new ransomware group known asRA Grouphas become the latest threat actor to leverage the leaked Babuk ransomware source code to spawn its own locker variant.T…
Multiple threat actors have capitalized on the leak of Babuk (aka Babak or Babyk) ransomware code in September 2021 to build as many as nine different ransomwa…
A security flow was found on redcarpet that escaping html was not properly done even if requested on some cases which may cause XSS vulnerability. This issue i…
A security flow was found on redcarpet that escaping html was not properly done even if requested on some cases which may cause XSS vulnerability. This issue i…
A security flow was found on redcarpet that escaping html was not properly done even if requested on some cases which may cause XSS vulnerability. This issue i…
A recent report entitled Cloud Native and Kubernetes Security Predictions 2023 underscores the rapidly evolving landscape of Kubernetes and cloud security, emp…
* The Bubblewrap sandbox no longer requires setting an application identifier via GApplication to operate correctly. Using GApplication is still recommended, b…
Linux is widely recognized for the impressive level of security and stability it offers admins and organizations, but this doesn't mean that the popular open-s…
Google disclosed that its improved security features and app review processes helped it block 1.43 million bad apps from being published to the Play Store in 2…
Google disclosed that its improved security features and app review processes helped it block 1.43 million bad apps from being published to the Play Store in 2…
* The Bubblewrap sandbox no longer requires setting an application identifier via GApplication to operate correctly. Using GApplication is still recommended, b…
Cross site scripting vulnerability in Javascript escaping. (CVE-2023-28447) Additional bug fixes included. See referenced release notes for details.
**Version 0.16.3** (2023-04-11) Security * Fixed issue with possible hang on malformed inputs (**CVE-2023-29479**). * Fixed issue where in some cases, secret k…
In the short time since their inception, ChatGPT and other generative AI platforms have rightfully gained the reputation of ultimate productivity boosters. How…