The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A group of academics from the North Carolina State University and Dokuz Eylul University have demonstrated what they say is the "first side-channel attack" on …
Researchers have revealed details of a now-patched high-severity security vulnerability in Apache Cassandra that, if left unaddressed, could be abused to gain …
0.11.0, fix use after free, CVE-2021-20204
0.11.0, fix use after free, CVE-2021-20204
0.11.0, fix use after free, CVE-2021-20204
Since cybersecurity is definitely an issue that's here to stay, I've just checked out the recently released first episodes of Cato NetworksÂCybersecurity Maste…
The operators behind the BlackRock mobile malware have surfaced back with a new Android banking trojan calledÂERMACÂthat targets Poland and has its roots in th…
When constructing an OpenSSL EC public or private key from PKCS#11 attributes or ECDH public data, check that the key is valid, i.e. that the point is on the c…
Global IT consultancy giant Accenture has become the latest company to be hit by the LockBit ransomware gang, according to a post made by the operators on thei…
An update that contains security fixes can now be installed.
India's flag carrier airline, Air India, hasÂdisclosedÂa data breach affecting 4.5 million of its customers over a period stretching nearly 10 years after its …
exiv2 security, bug fix, and enhancement update
The data is in. According to IBM Security'sÂ2020 Cost of a Data Breach Report, there is a 50% increase in cloud usage for enterprises across all industries. Th…
An update that solves two vulnerabilities and has one errata is now available.
Let's first take a look back at 2020!Adding to the list of difficulties that surfaced last year, 2020 was also grim for personal data protection, as it has mar…
The updated packages fix a security vulnerability: In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. T…
Have you heard that CSIRO has announced the completion of the proof of implementation correctness of the open-source seL4 microkernel for the RISC-V ISA?
An update that fixes one vulnerability is now available.
The updated packages fix a security vulnerability: In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds …
Exclude arch s390x on el8 ---- Update from upstream
Exclude arch s390x on el8 ---- Update from upstream
Exclude arch s390x on el8 ---- Update from upstream
Seven Internet giants including Mozilla, Twitter and Reddit have asked the US House of Representatives to protect users' privacy online and prohibit the warran…
IBM has admitted to making 'a process error, improper response' to a bug report that identified four vulnerabilities in its enterprise security software, and t…