The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 102.11.0 ; https://www.mozilla.org/en- US/security/advisories/mfsa2023-18/ ; https://www.thunderbird.net/en- US/thunderbird/102.11.0/releasenotes/
An integer overflow vulnerability exists in golang-websocket, a Go package implementing the WebSocket protocol connection. An attacker would use this flaw to c…
A security vulnerability has been disclosed in the popular WordPress pluginEssential Addons for Elementorthat could be potentially exploited to achieve elevate…
A security vulnerability has been disclosed in the popular WordPress pluginEssential Addons for Elementorthat could be potentially exploited to achieve elevate…
update to 2.40.1 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007) Refer to the release notes for 2.30.9 for details of each CVE as well as the following securi…
Multiple threat actors have capitalized on the leak of Babuk (aka Babak or Babyk) ransomware code in September 2021 to build as many as nine different ransomwa…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, spoofing or per…
- Update to latest 3.2 release - Security fix for CVE-2023-31047 - Provide python3-django so it can be used by dependents that do not use the python3.Xdist(dja…
Google unveiled a slew of new privacy, safety, and security features today at its annual developer conference, Google I/O. The tech giant's latest initiatives …
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, spoofing or per…
Cybersecurity researchers have shared details about a now-patched security flaw in Windows MSHTML platform that could be abused to bypass integrity protections…
A U.K. national has pleaded guilty in the U.S. in connection with the July 2020 Twitter attack affecting numerous high-profile accounts and defrauding other us…
**MySQL 8.0.33** Changelog: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-33.html
**MySQL 8.0.33** Changelog: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-33.html
A security flow was found on redcarpet that escaping html was not properly done even if requested on some cases which may cause XSS vulnerability. This issue i…
A security flow was found on redcarpet that escaping html was not properly done even if requested on some cases which may cause XSS vulnerability. This issue i…
A security flow was found on redcarpet that escaping html was not properly done even if requested on some cases which may cause XSS vulnerability. This issue i…
Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some (potential or confirmed) security or soundness issues: - `tokio`: [RUSTSEC-2023-0005]…
Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some (potential or confirmed) security or soundness issues: - `tokio`: [RUSTSEC-2023-0005]…
Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some (potential or confirmed) security or soundness issues: - `tokio`: [RUSTSEC-2023-0005]…
Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some (potential or confirmed) security or soundness issues: - `tokio`: [RUSTSEC-2023-0005]…
Recent updates for the `tokio`, `h2`, and `openssl` crates addressed some (potential or confirmed) security or soundness issues: - `tokio`: [RUSTSEC-2023-0005]…
A recent report entitled Cloud Native and Kubernetes Security Predictions 2023 underscores the rapidly evolving landscape of Kubernetes and cloud security, emp…
It was discovered that there was a potential validation bypass in Django, a popular Python-based web development framework. Uploading multiple files using one …