Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Qualys researchers demonstrated how to chain a new Linux flaw with two other two issues to gain full root privileges on an impacted system.
Julian Gilbey discovered that schroot, a tool allowing users to execute commands in a chroot environment, had too permissive rules on chroot or session names, …
Julian Gilbey discovered that schroot, a tool allowing users to execute commands in a chroot environment, had too permissive rules on chroot or session names, …
A nascent Linux-based botnet named Enemybot has expanded its capabilities to include recently disclosed security vulnerabilities in its arsenal to target web s…
This is the March 2022 update for .NET 6: SDK 6.0.103 and Runtime 6.0.3 Release notes: - SDK: https://github.com/dotnet/core/blob/main/release- notes/6.0/6.0.3…
A new version of the MyloBot malware has been observed to deploy malicious payloads that are being used to send sextortion emails demanding victims to pay $2,7…
maddog, as he's affectionately known throughout the Linux and open source community, has made a career of being in the trenches with the Linux developers, teac…
Researchers have demonstrated how a creative hacker can manipulate iPhone users into keeping their devices…NoReboot iOS Attack Prevents Your iPhone From Turnin…
Microsoft has rolled outPatch Tuesday updatesto address multiple security vulnerabilities in Windows and other software, including one actively exploited flaw …
At least 300,000 IP addresses associated with MikroTik devices have been found vulnerable to multiple remotely exploitable security vulnerabilities that have s…
Red Hat's recent decision to discontinue CentOS 8 has left a critical void in the enterprise Linux market, shifting the spotlight onto other enterprise-ready L…
Every organization holds some kind of data. It could be the data of people who…How to Protect Your Enterprise’s Data in a Remote Attack World on Latest Hacking…
This is the monthly .NET update for August 2021. This updates the SDK to 3.1.118 and runtime to 3.1.18 Upstream Release Notes: https://github.com/dotnet/core/b…
In MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots have certain unintended API access. When a bot account has a "…
Threat actors behind the infamousÂTrickBotÂmalware have been linked to a new ransomware strain named "Diavol," according to the latest research.Diavol and Cont…
One more time, the Android Play Store has made it to the news due to a security problem. This time,TERRACOTTA Ad Fraud Botnet Targeted Android Play Store on La…
Patches issued to fix a recent BootHole vulnerability have rendered RedHat and CentOS systems unbootable.
A dangerous new vulnerability has been discovered in Secure Boot that affects a huge number of Linux and Windows systems that use the UEFI specification during…
Microsoft has announced a new free-to-use initiative aimed at uncovering forensic evidence of sabotage on Linux systems, including rootkits and intrusive malwa…
Academics from àcole Polytechnique Fédérale de Lausanne (EPFL) disclosed a security vulnerability in Bluetooth that could potentially allow an attacker to spo…
A new version of the infamous Mirai botnet is exploiting a recently uncovered critical vulnerability in network-attached storage (NAS) devices in an attempt to…
Brotli could be made to crash or run programs if it received specially crafted input.
Brotli 1.2.1 update which is security fix for CVE-2026-111497
Hetzner says customers using PXE boot should hold off on server restarts.
