Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowi…
Google on Tuesday released a new version of Chrome web-browsing software for Windows, Mac, and Linux with fixes for two security vulnerabilities, both of which…
A previously undocumented malware downloader has been spotted in the wild in phishing attacks to deploy credential stealers and other malicious payloads.Dubbed…
Linux does, occasionally, raise security concerns. While many users see it as the most secure, robust and versatile OS available, security precautions still ha…
It was discovered that there was a potential directory traversal issue in Django, a Python-based web development framework. The vulnerability could have been e…
Heads up, Windows users! A new malware campaign 'BazarCall' is actively targeting Windows systems via…BazarCall Malware Targets Windows Systems While Mimicking…
Researchers found an active campaign in the wild delivering malicious Call of Duty: Warzone cheats.…Call of Duty: Warzone Cheating Gamers Scammed on Latest Hac…
Merely weeks after releasing out-of-band patches for iOS, iPadOS, macOS and watchOS, Apple has issued yet another security update for iPhone, iPad, and Apple W…
A new malware is in the wild that is actively targeting users to steal credentials…New CopperStealer Malware Targets Users To Steal Login Credentials on Latest…
The updated packages fix security vulnerabilities. At least one of them is known to be actively exploited. References: - https://bugs.mageia.org/show_bug.cgi?i…
Greetings fellow Linux users!Thank you to everyone who took part in our LinuxSecurity User Survey. As you may be aware of, LinuxSecurity.com is currently in th…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) on Wednesday issued a joint advisory warning of …
When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the di…
Microsoft on Friday warned of active attacks exploiting unpatched Exchange Servers carried out by multiple threat actors, as the hacking campaign is believed t…
The SolarWinds Sunburst attack has been in the headlines since it was first discovered in December 2020.ÂAs the so-called layers of the onion are peeled back, …
A directory traversal vulnerability was discovered in python-flask-cors, a Flask extension for handling Cross Origin Resource Sharing (CORS), allowing to acces…
This package allowed ../ directory traversal to access private resources because resource matching did not ensure that pathnames were in a canonical format.
RDFLib could be made to made to execute arbitrary code if it were running in a directory with a specially crafted file.
As ransomware attacksÂagainst critical infrastructure continue to spike in recent months, cybersecurity researchers have uncovered a new entrant that has been …
Over the next couple of weeks and months, LinuxSecurity editors and contributors will be writing a series on Linux Web Server Security. This week, we're summar…
As tensions between the U.S. and China heighten over data security issues, the Chinese government has taken a proactive step to protect users' privacy with a d…
Heads up Instagram users! The hackers are targeting you once again. A new phishing scheme is actively targeting Instagram usersNew Instagram Phishing Scheme Ai…
Fabian Vogt reported that the Ark archive manager did not sanitise extraction paths, which could result in maliciously crafted archives with symlinks writing o…
Website security is indispensable in today's ever-increasing technology landscape. If proactive and pre-emptive website security is not put in place,10 Most Im…
