The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Another WordPress plugin with over 1 million active installations has made it to the news due to security bugs. ThisPage Builder WordPress Plugin Bugs Could Al…
An advanced group of Chinese hackers has recently been spotted to be behind a sustained cyber espionage campaign targeting government entities in Australia, In…
Several vulnerabilities were discovered in salt, a powerful remote execution manager, which could result in retrieve of user tokens from the salt master, execu…
A vulnerability was discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. LDAP search filters with nested boolean express…
**horde 5.2.22** * [jan] SECURITY: Protect image processing service from rendering active SVG content within the browser. * [jan] SECURITY: Fix XSS vulnerabili…
Cybersecurity researchers from ESET on Thursday said they took down a portion of a malware botnet comprising at least 35,000 compromised Windows systems that a…
A directory traversal vulnerability resulting from insufficient input sanitization was discovered in the Horde Application Framework. An authenticated remote a…
Updated python-ntlk package fixes security vulnerability: A vulnerability was found in NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, all…
The malware authors behind TrickBot banking Trojan have developed a new Android app that can intercept one-time authorization codes sent to Internet banking cu…
An issue has been found in e2fsprogs, a package that contains ext2/ext3/ext4 file system utilities. A specially crafted ext4 directory can cause an out-of-boun…
The Coronavirus is hitting hard on the world's economy, creating a high volume of uncertainty within organizations.Cybersecurity firm Cynet today revealed new …
Another malware has become active in the wild targeting Android devices. Dubbed Cookiethief, this Android malware does what its nameCookiethief Malware Targets…
The latest victim of an actively exploited zero-day vulnerability is the Taiwan-based firm 'Zyxel' whom manufacture networking devices. ÂZyxel hasZyxel Patched…
Phishing attacks have become one of the business world's top cybersecurity concerns. These social engineering attacks have been rising over the years, with the…
A popular WordPress theme plugin with over 200,000 active installations contains a severe but easy-to-exploit software vulnerability that, if left unpatched, c…
Updated qtbase5 packages fix security vulnerabilities: QPluginLoader in Qt versions 5.0.0 through 5.13.2 would search for certain plugins first on the current…
This package allowed ../ directory traversal to access private resources because resource matching did not ensure that pathnames were in a canonical format.
Two security issues were found in the Qt library, which could result in plugins and libraries being loaded from the current working directory, resulting in pot…
In this era of rising cybercrimesand never-ending cyber attacks, having proactive cybersecurity policies is a must for every organization. ManyWhy Organization…
If you use Zoom to host your remote online meetings, you need to read this piece carefully.The massively popular video conferencing software has patched a secu…
Updated e2fsprogs packages fix security vulnerability: A code execution vulnerability in the directory rehashing functionality (CVE-2019-5188).
There is a person in every organization that is the direct owner of breach protection. His or her task is to oversee and govern the process of design, build, m…
A new variant of ransomware from the CryptoMix family is active in the wild. As discovered by researchers, the newNew Clop Ransomware Variant Kills 663 Windows…
**PHP version 7.3.13** (18 Dec 2019) **Bcmath:** * Fixed bug php#78878 (Buffer underflow in bc_shift_addsub). (**CVE-2019-11046**). (cmb) **Core:** * Fixed bug…