Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes two vulnerabilities is now available.
This is the June update for .NET Core 3.1. It updates the .NET Core runtime to 3.1.16 and the .NET SDK to 3.1.116. This update includes a fix for CVE-2021-3195…
This is the .NET 5.0 update for June 2021. It includes a fix for CVE-2021-31957: ASP.NET Denial of Service Vulnerability
This is the June update for .NET Core 3.1. It updates the .NET Core runtime to 3.1.16 and the .NET SDK to 3.1.116. This update includes a fix for CVE-2021-3195…
This is the .NET 5.0 update for June 2021. It includes a fix for CVE-2021-31957: ASP.NET Denial of Service Vulnerability
New upgrades have been made to a Python-based "self-replicating, polymorphic bot" called Necro in what's seen as an attempt to improve its chances of infecting…
A team of security researchers from Google has demonstrated yet another variant of the Rowhammer vulnerability that targets increasingly smaller DRAM chips to …
Ivanti, the company behind Pulse Secure VPN appliances, has published a security advisory for a high severity vulnerability that may allow an authenticated rem…
An update that fixes one vulnerability is now available.
An update for .NET 5.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important…
An authentication flaw was found in ceph. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY requests, it doesn't sanitize other_keys, allowing key reuse. An …
Security researchers have uncovered nine vulnerabilities affecting four TCP/IP stacks impacting more than 100 million consumer and enterprise devices that coul…
yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload (CVE-2020-7608). References: - https://bugs.m…
Cybersecurity researchers on Monday disclosed a new wave of ongoing attacks exploiting multiple vulnerabilities to deploy new Mirai variants on internet connec…
A malicious web shell deployed on Windows systems by leveraging a previously undisclosed zero-day in SolarWinds' Orion network monitoring software may have bee…
Apple has released out-of-band patches for iOS, macOS, watchOS, and Safari web browser to address a security flaw that could allow attackers to run arbitrary c…
An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Low. A Com…
When Samba is used as a domain controller, an unauthenticated attacker on the network can gain administrator access by exploiting a netlogon protocol flaw (CVE…
An update that fixes one vulnerability is now available.
An update that fixes 18 vulnerabilities is now available.
A group of researchers has detailed a new timing vulnerability in Transport Layer Security (TLS) protocol that could potentially allow an attacker to break the…
Security researchers have found that they can detect Linux kernel security fixes before they are released - information that could be used by malicious hackers…
A vulnerability in Kleopatra allows arbitrary execution of code.
An update that fixes two vulnerabilities is now available.
