Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Lot of CVEs were fixed by upstream since our current version; please see the links. References: - https://bugs.mageia.org/show_bug.cgi?id=33609
BlueZ could be made to run programs as an administrator if it connected to a malicious Bluetooth device.
CVE-2024-53263 When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the `git-credential(1)` command
AlmaLinux 10 beta has arrived with exciting features designed to increase system security and streamline configuration management. This latest release introduc…
It was discovered that there was a potential command-injection vulnerability was discovered in ucf, a tool to preserve user changes to config files.
As organizations look to modernize their applications and increase performance, .NET Core can be a pivotal shift from the .NET Framework. It is the perfect pla…
Recent data breaches have highlighted the critical need to improve guest Wi-Fi infrastructure security in modern business environments. Organizations face incr…
Threat actors have been observed concealing malicious code in images to deliver malware such as VIP Keylogger and 0bj3ctivity Stealer as part of separate campa…
As the backbone of much of the world's technological infrastructure, the open-source community prides itself on transparency, collaboration, and innovation . H…
The U.S. Department of Justice (DoJ) on Tuesday disclosed that a court-authorized operation allowed the Federal Bureau of Investigation (FBI) to delete PlugX m…
Redis 7.2.7 Released Mon 6 Jan 2025 12:30:00 IDT Upgrade urgency SECURITY: See security fixes below. Security fixes (CVE-2024-46981) Lua script commands may le…
Several vulnerabilities were discovered in rsync, a fast, versatile, remote (and local) file-copying tool. CVE-2024-12084
New research has pulled back the curtain on a "deficiency" in Google's "Sign in with Google" authentication flow that exploits a quirk in domain ownership to g…
What do identity risks, data security risks and third-party risks all have in common? They are all made much worse by SaaS sprawl. Every new SaaS account adds …
Threat hunters are calling attention to a new campaign that has targeted Fortinet FortiGate firewall devices with management interfaces exposed on the public i…
Threat hunters are calling attention to a new campaign that has targeted Fortinet FortiGate firewall devices with management interfaces exposed on the public i…
Update to 128.6.0 https://www.thunderbird.net/en-US/thunderbird/128.6.0esr/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-04/
Authentication bypass in CEPH RadosGW. (CVE-2024-48916) References: - https://bugs.mageia.org/show_bug.cgi?id=33896 - https://ubuntu.com/security/notices/USN-7…
The cyber world’s been buzzing this week, and it’s all about staying ahead of the bad guys. From sneaky software bugs to advanced hacking tricks, the risks are…
Linux is a powerful operating system that is greatly appreciated for being reliable, flexible, and open in nature. It runs servers, desktops, and even embedded…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or privilege esc…
Mongolia, Taiwan, Myanmar, Vietnam, and Cambodia have been targeted by the China-nexus RedDelta threat actor to deliver a customized version of the PlugX backd…
As a Linux admin, you know that keeping your systems up-to-date is crucial for maintaining performance and security. The recently released KDE Plasma 6.2.5 off…
update to 8.0.2 fixes CVE-2024-46981 - Lua script commands may lead to remote code execution fixes CVE-2024-51741 - Denial-of-service due to malformed ACL sele…
