Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The Cybersecurity & Infrastructure Security Agency (CISA) added seven new Linux vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on Friday …
Researchers caught Trafficstealer actively abusing Docker Container APIs to redirect users to malicious websites. The…Trafficstealer Exploits Container APIs fo…
A security vulnerability has been disclosed in the popular WordPress pluginEssential Addons for Elementorthat could be potentially exploited to achieve elevate…
Several high-severity vulnerabilities have been found in the WebKitGTK web engine, including a use after free issue that may have been actively exploited (CVE-…
Government organizations in Central Asia are the target of a sophisticated espionage campaign that leverages a previously undocumented strain of malware dubbed…
Iranian nation-state groups have now joined financially motivated actors in actively exploiting a critical flaw in PaperCut print management software, Microsof…
The North Korean state-sponsored threat actor known asKimsukyhas been discovered using a new reconnaissance tool calledReconSharkas part of an ongoing global c…
Threat actors are actively exploiting an unpatched five-year-old flaw impacting TBK digital video recording (DVR) devices, according to an advisory issued by F…
Microsoft has confirmed that theactive exploitation of PaperCut serversis linked to attacks that are designed to deliver Cl0p and LockBit ransomware families.T…
The prolific Iranian nation-state group known asCharming Kittenis actively targeting multiple victims in the U.S., Europe, the Middle East and India with a nov…
A new malware tool kit, “Decoy Dog,” has been actively targeting enterprise networks for a…Decoy Dog Malware Tool Kit Spotted Via Malicious DNS Queries on Late…
Researchers found active exploitation of the Eval PHP WordPress plugin to deploy backdoors on target…Hackers Abuse Outdated Eval PHP WordPress Plugin To Deploy…
org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name…
Researchers have found new malware targeting web browsers in active campaigns. Identified as the Zaraza…Zaraza Malware Exploits Web Browsers To Steal Stored Pa…
Fortra, the company behind Cobalt Strike, shed light on a zero-day remote code execution (RCE) vulnerability in its GoAnywhere MFT tool that has come underacti…
Google on Tuesday rolled out emergency fixes to address another actively exploited high-severity zero-day flaw in its Chrome web browser.The flaw, tracked asCV…
Researchers have spotted a new Android malware “Goldoson” actively targeting users in South Korea via…Goldoson Android Malware Target Korean Users Via Legit Ap…
A novel credential-stealing malware calledZaraza botis being offered for sale on Telegram while also using thepopularmessaging serviceas a command-and-control …
Attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal. (CVE-2023-28371) References: - http…
Unknown threat actors are actively exploiting a recently patched security vulnerability in the Elementor Pro website builder plugin for WordPress.The flaw, des…
3CX said it'sworking on a software updatefor its desktop app after multiple cybersecurity vendors sounded the alarm on what appears to be an active supply chai…
3CX said it'sworking on a software updatefor its desktop app after multiple cybersecurity vendors sounded the alarm on what appears to be an active supply chai…
Apple on Monday backported fixes for an actively exploited security flaw to older iPhone and iPad models.The issue, tracked asCVE-2023-23529, concerns a type c…
A recent campaign undertaken byEarth Pretaindicates that nation-state groups aligned with China are getting increasingly proficient at bypassing security solut…
