Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An infamous cross-platform crypto-mining malware has continued to refine and improve upon its techniques to strike both Windows and Linux operating systems by …
A new phishing campaign is active in the wild, targeting users with BazarBackdoor malware. The…New Phishing Campaign Spreads BazarBackdoor Malware Via Nested A…
In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file…
Updated file-roller package fixes security vulnerability: A path traversal vulnerability was found in file-roller due to an incomplete fix for CVE-2020-11736. …
Cybersecurity researchers on Thursday revealed details about a new Mirai-inspired botnet called "mirai_ptea" that leverages an undisclosed vulnerability in dig…
Steven Seeley discovered that in jetty, a Java servlet engine and webserver, requests to the ConcatServlet and WelcomeFilter are able to access protected resou…
The package python-django before version 3.2.4-1 is vulnerable to multiple issues including insufficient validation and directory traversal.
A North Korean threat actor active since 2012 has been behind a new espionage campaign targeting high-profile government officials associated with its southern…
There is a person in every organization that is the direct owner of breach protection. His or her task is to oversee and govern the process of design, build, m…
From robust security to high levels of flexibility, Linux offers businesses an array of attractive benefits. Here's what you need to know in a nutshell about t…
Threat actors are abusing Microsoft Build Engine (MSBuild) to filelessly deliver remote access trojans and password-stealing malware on targeted Windows system…
Adobe has releasedÂPatch Tuesday updatesÂfor the month of May with fixes for multiple vulnerabilities spanning 12 different products, including a zero-day flaw…
It was discovered that there was potential directory-traversal vulnerability in Django, a popular Python-based web development framework.
Ivanti, the company behind Pulse Secure VPN appliances, has released a security patch to remediate a critical security vulnerability that was found being activ…
Ivanti, the company behind Pulse Secure VPN appliances, has released a security patch to remediate a critical security vulnerability that was found being activ…
update to 2.9.1 (fixes a potential directory traversal issue)
Hackers are scanning the internet for weaknesses all the time, and if you don't want your organization to fall victim, you need to be the first to find these w…
Security is only as strong as the weakest link. As further proof of this, Apple released an update to macOS operating systems to address an actively exploited …
A new malicious campaign is active in the wild aiming at WhatsApp users. The campaign…Wormable Malware Comes Back As 'WhatsApp Pink' ' Now Targets Signal, Tele…
An issue was discovered in rcp in MIT krb5-appl through 1.0.3. Due to the rcp implementation being derived from 1983 rcp, the server chooses which files/direct…
SonicWall has addressed three critical security vulnerabilities in its hosted and on-premises email security (ES) product that are being actively exploited in …
Microsoft has recently warned users of a new phishing campaign active in the wild. This…This Phishing Campaign Delivers IcedID Malware Via Web Contact Forms ' …
In its April slate of patches, Microsoft rolled out fixes for a total ofÂ114 security flaws, including an actively exploited zero-day and four remote code exec…
Google on Tuesday released a new version of Chrome web-browsing software for Windows, Mac, and Linux with patches for two newly discovered security vulnerabili…
