Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Website security is indispensable in today's ever-increasing technology landscape. If proactive and pre-emptive website security is not put in place,10 Most Im…
Anyone paying attention to the cybersecurity technology market has heard the term XDR - Extended Detection and Response.XDR is a new technology approach that c…
A maliciously crafted TAR archive containing symlink entries would install files anywhere in the user's home directory upon extraction (CVE-2020-24654). Refere…
A directory traversal vulnerability was discovered in Icinga Web 2, a web interface for Icinga, which could result in the disclosure of files readable by the p…
A directory traversal vulnerability was discovered in Icinga Web 2, a web interface for Icinga, which could result in the disclosure of files readable by the p…
Multiple vulnerabilities were discovered in Python2.7, an interactive high-level object-oriented language.
Cybersecurity researchers today took the wraps off a sophisticated, multi-functional peer-to-peer (P2P) botnet written in Golang that has been actively targeti…
In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the execut…
An access flaw was found in targetcli, where the /etc/target and underneath backup directory/files were world-readable. This flaw allows a local attacker to ac…
When deepfake is increasingly becoming a problem, scientists have come up with a counteractive strategy. Researchers have shared details aboutResearchers Propo…
A security researcher earlier today publicly revealed details and proof-of-concept exploit code for an unpatched, critical zero-day remote code execution vulne…
rubyzip gem version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the files…
jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated …
ClamAV 0.102.4 is a bug patch release to address the following issues: CVE-2020-3350 Fixed a vulnerability a malicious user could exploit to replace a scan tar…
An issue has been found in e2fsprogs, a package that contains ext2/ext3/ext4 file system utilities. A specially crafted ext4 directory can cause an out-of-boun…
Head up Android users! A new Android trojan is active in the wild that pilfers your information. Dubbed BlackRock, thisAndroid Malware BlackRock Emerges As Inf…
Have you heard about the growing Zephyr Project, hosted by the Linux Foundation, that aims to build an open-source real-time operating system (RTOS) for the Io…
Multiple security issues were discovered in Python, an interactive high-level object-oriented language. CVE-2018-20406
A new malware dubbed 'Lucifer' (or Satan) is actively targeting Windows systems. This malware exploits various vulnerabilities in the systemLucifer Malware Eme…
New Android ransomware already active in the wild has caught the researchers' attention. Identified as CryCryptor, this ransomware masks itselfCryCryptor Andro…
* Fix iptables No chain/target/match by that name (bz #1813830) * systemd: start libvirtd after firewalld/iptables services (bz #1697636) * CVE-2020-12430: mem…
Updated ruby-RubyGems package fixes security vulnerabilities The following vulnerabilities have been reported. CVE-2019-8320: Delete directory using symlink wh…
A new ransomware is active in the wild that threatening the education and corporate sector. Dubbed Tycoon, this stealth ransomwareStealthy Tycoon Ransomware Ta…
Updated ant packages fix security vulnerability: Apache Ant uses the default temporary directory identified by the Java system property java.io.tmpdir for seve…
