הניתוחים שלנו
מה זה אומר עבור השרתים שלכם
חדשות האבטחה החשובות, בהסבר הצוות שלנו — עם הצעדים המעשיים שיש לנקוט.
חדשות האבטחה החשובות, בהסבר הצוות שלנו — עם הצעדים המעשיים שיש לנקוט.
נאספים כל שעתיים מפרסומים מקצועיים — כל קישור מוביל למאמר המקורי.
עדיין אין חדשות בשפתכם — הנה הסיקור שלנו באנגלית:
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a…
- Fixed h.264 video playback over va-api (https://bugzilla.mozilla.org/show_bug.cgi?id=1762725) ---- - New upstream version (100.0)
Use after free in Portals. (CVE-2022-1125) Use after free in QR Code Generator. (CVE-2022-1127) Inappropriate implementation in Web Share API. (CVE-2022-1128) …
What is Azurite? This one’s a doozy folks. With the rapid growth of cloud infrastructure…Azurite - An Azure AD Enumeration Tool on Latest Hacking News
The update for expat released as DSA 5085-1 introduced regressions for applications using URI characters (':' in particular) for a namespace separator (while t…
Similarities have been unearthed between the Dridex general-purpose malware and a little-known ransomware strain called Entropy, suggesting that the operators …
For the last few years, the cybersecurity threat landscape has gotten progressively more complex and dangerous. The online world is now rife with data thieves,…
CVE-2022-0096: Use after free in Storage. CVE-2022-0097: Inappropriate implementation in DevTools. CVE-2022-0098: Use after free in Screen Capture. CVE-2022-00…
Cybersecurity researchers have proposed a novel approachthat harnesses electromagnetic field emanations from the Internet of Things (IoT) devices as a side-cha…
Updated mediawiki packages fix security vulnerabilities: == Security fixes == * (T292763. CVE-2021-44854) REST API incorrectly publicly caches autocomplete sea…
A flaw was discovered in tang, a network-based cryptographic binding server, which could result in leak of private keys. For the stable distribution (bullseye)…
The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification vers…
openssh: privilege escalation when AuthorizedKeysCommand or AuthorizedPrincipalsCommand are configured (CVE-2021-41617) For more details about the security iss…
New version of software. References to locally tested API removed in this version. Public instance is used instead.
New version of software. References to locally tested API removed in this version. Public instance is used instead.
Exposed or leaked public and private keys can severely risk the security of apps and…Driftwood Security Tool Released to Prevent Private Key Leaks on Latest Ha…
Google researchers discovered zero-day affecting macOS devices that could allow recording keystrokes or screen grabs.…MacOS Zero-Day Vulnerability Allowed Keyl…
Several vulnerabilities were discovered in Icinga 2, a general-purpose monitoring application. An attacker could retrieve sensitive information such as service…
rpki-client 7.4 Public Keys. * Fix issues with chunked transfer encoding in the RRDP HTTP client. * Cleanup and improvement of how IO is handled. * Improvement…
rpki-client 7.4 Public Keys. * Fix issues with chunked transfer encoding in the RRDP HTTP client. * Cleanup and improvement of how IO is handled. * Improvement…
rpki-client 7.4 Public Keys. * Fix issues with chunked transfer encoding in the RRDP HTTP client. * Cleanup and improvement of how IO is handled. * Improvement…
A critical Linux kernel bug (CVE-2021-43267) exists in a TIPC message type that allows Linux nodes to send cryptographic keys to each other, and could allow re…
Updated php packages fix security vulnerability: In PHP versions 8.0.x below 8.0.12, when running PHP FPM SAPI with main FPM daemon process running as root and…
It was discovered that openCryptoki incorrectly handled certain EC keys. An attacker could possibly use this issue to cause a invalid curve attack. References:…
