Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Ziming Zhang discovered that BlueZ incorrectly handled memory write operations in its gatt server. A remote attacker could possibly use this to cause BlueZ to …
Security fix for CVE-2021-41500. Upstream notes for version 1.2.7 read: "Bug fixes, Python 3.10 compatibility".
Apache Log4j2 is vulnerable to a remote code execution (RCE) attack where an attacker with permission to modify the logging configuration file can construct a …
Chen Zhaojun of Alibaba Cloud Security Team discovered a critical security vulnerability in Apache Log4j, a popular Logging Framework for Java. JNDI features u…
**MariaDB 10.5.13** Release notes: https://mariadb.com/kb/en/mariadb-10513-release-notes/ Maintainer notes: This update contains - conditionally only on=35 - p…
**MariaDB 10.5.13** Release notes: https://mariadb.com/kb/en/mariadb-10513-release-notes/ Maintainer notes: This update contains - conditionally only on=35 - p…
An update that fixes one vulnerability is now available.
BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be …
In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vuln…
Security fix for CVE-2021-40529
Apache Santuario - XML Security for Java is vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a…
Cybersecurity researchers have disclosed a security flaw in the Linux Kernel's Transparent Inter Process Communication (TIPC) module that could potentially be …
Microsoft on Tuesday rolled outÂsecurity patchesÂto contain a total of 71 vulnerabilities in Microsoft Windows and other software, including a fix for an activ…
Microsoft on Tuesday rolled outÂsecurity patchesÂto contain a total of 71 vulnerabilities in Microsoft Windows and other software, including a fix for an activ…
Apache Santuario, XML Security for Java, is vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a…
A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them …
An update that solves two vulnerabilities, contains one feature and has one errata is now available.
An update that solves two vulnerabilities, contains one feature and has one errata is now available.
Multiple unpatched security vulnerabilities have been disclosed in Mitsubishi safety programmable logic controllers (PLCs) that could be exploited by an advers…
It is no secret that email is the preferred method of communication for businesses - a trend that has only been magnified with the increase in remote workers b…
SolarWinds, the Texas-based company that became the epicenter of aÂmassive supply chain attackÂlate last year, has issued patches to contain a remote code exec…
A common misconception among startup founders is that cybercriminals won't waste time on them, because they're not big or well known enough yet.But just becaus…
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (pass…
A flaw was found in the Dynamic Host Configuration Protocol (DHCP). There is a discrepancy between the code that handles encapsulated option information inleas…
