Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
containerd could be made to overwrite file permissions.
An update that solves four vulnerabilities and has 13 fixes is now available.
Even as MicrosoftÂexpanded patchesÂfor the so-called PrintNightmare vulnerability for Windows 10 version 1607, Windows Server 2012, and Windows Server 2016, it…
Cybersecurity researchers have disclosed a critical unpatched vulnerability affecting Pling-based free and open-source software (FOSS) marketplaces for Linux p…
A serious cyber attack has recently been brought to the attention of numerous Japanese government…Hackers Exploited Fujitsu SaaS Targeting Japanese Govt Agenci…
Following the disruptive cyberattack on Colonial Pipeline, ransomware has drawn great media attention. Soon after…Cybercrime Forums XSS, Exploit, RaidForums Ba…
A team of researchers has recently shared insights into TsuNAME vulnerability risking DNS servers. As…TsuNAME Vulnerability Allows DoS Attacks Against DNS Serv…
A set of dangerous vulnerabilities have been discovered in the Exim mail server. Remote code execution, privilege escalation to root and lateral movement throu…
A serious security vulnerability existed in the PHP Composer package. Exploiting this bug could allow…Vulnerability In PHP Composer Package Could Allow Supply-…
Valve, the giant behind the popular gaming platform Steam, had lately addressed a years-old flaw.…Valve Finally Patched A Steam RCE Vulnerability That Waited A…
SonicWall has addressed three critical security vulnerabilities in its hosted and on-premises email security (ES) product that are being actively exploited in …
A potential Cross-Site Scripting (XSS) vulnerability was found in rails, a ruby based MVC framework. Views that allow the user to control the default (not foun…
netqmail could be made to crash or run programs as any user (except root) if it received specially crafted network traffic.
An update that solves one vulnerability and has 6 fixes is now available.
An update that solves one vulnerability and has 6 fixes is now available.
Multiple security issues were discovered in the Rails web framework which could result in cross-site scripting, information leaks, code execution, cross-site r…
Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash. (CVE-2017-…
A researcher found a vulnerability in the wolfSSL library that posed a threat to users' privacy. Exploiting the bug couldVulnerability In wolfSSL Could Allow M…
It was discovered that there was an issue where kmail would default to using unencrypted POP3 communication despite the UI indicating that encryption was in us…
Tim Starling discovered two vulnerabilities in firejail, a sandbox program to restrict the running environment of untrusted applications.
Cybersecurity researchers today highlighted an evasive phishing technique that attackers are exploiting in the wild to target visitors of several sites with a …
A vulnerability was discovered in Claws Mail's STARTTLS handling, possibly allowing an integrity/confidentiality compromise.
