Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
In a sneaky new supply-chain attack , threat actors have been discovered exploiting package naming conventions to trick unsuspecting developers into installing…
Cybersecurity researchers have disclosed a surge in "mass scanning, credential brute-forcing, and exploitation attempts" originating from IP addresses associat…
A newly disclosed high-severity security flaw impacting OttoKit (formerly SureTriggers) has come under active exploitation within a few hours of public disclos…
Cybersecurity researchers have called attention to a software supply chain attack targeting the Go ecosystem that involves a malicious package capable of grant…
A critical security flaw has been disclosed in the Cacti open-source network monitoring and fault management framework that could allow an authenticated attack…
Are you using rsync to synchronize files on your Ubuntu-based Linux systems? If so, s everal severe remote code execution (RCE) vulnerabilities recently found …
Microsoft kicked off 2025 with a new set of patches for a total of 161 security vulnerabilities across its software portfolio, including three zero-days that h…
In the ongoing quest to enhance security and streamline functionality, the Linux kernel community increasingly focuses on potentially deprecated protocols that…
Sophos users must ensure that their firewall devices are updated with the latest updates, as…Sophos Firewall Vulnerabilities Could Allow Remote Attacks on Late…
A now-patched critical security flaw impacting Fortinet FortiClient EMS is being exploited by malicious actors as part of a cyber campaign that installed remot…
BeyondTrust has disclosed details of a critical security flaw in Privileged Remote Access (PRA) and Remote Support (RS) products that could potentially lead to…
New jupyterlab and notebook fixing security vulnerabilities.
New jupyterlab and notebook fixing security vulnerabilities.
Select list elements could be shown over another site. (CVE-2024-11692) CSP Bypass and XSS Exposure via Web Compatibility Shims. (CVE-2024-11694) URL Bar Spoof…
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '' characters at the end of header names are ignored, i.e., a "Transfer…
A critical security flaw has been disclosed in the Kubernetes Image Builder that, if successfully exploited, could be abused to gain root access under certain …
A vulnerability has been found in ZNC which could result in remote code execution.
Update jupyterlab and python-notebook to fix CVE-2024-43805.
Update jupyterlab and python-notebook to fix CVE-2024-43805.
Researchers discovered the active exploitation of a zero-day vulnerability in AVTECH IP cameras by the…Malware Botnet Exploits Vulnerable AVTECH IP Cameras on …
Cybersecurity researchers have disclosed a critical security flaw impacting Microsoft's Copilot Studio that could be exploited to access sensitive information.…
Two vulnerabilities have been discovered in the IMAP implementation of the Dovecot mail server: Excessive numbers of address headers or very large headers can …
A newly discovered attack vector in GitHub Actions artifacts dubbed ArtiPACKED could be exploited to take over repositories and gain access to organizations' c…
Cybersecurity researchers have discovered two security flaws in Microsoft's Azure Health Bot Service that, if exploited, could permit a malicious actor to achi…
