Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Threat actors are advertising a new information stealer for the Apple macOS operating system calledAtomic macOS Stealer(or AMOS) on Telegram for $1,000 per mon…
The cyber espionage actor tracked asBlind Eaglehas been linked to a new multi-stage attack chain that leads to the deployment of the NjRAT remote access trojan…
Researchers have found a new way to attack air-gapped systems. Dubbed “COVID-bit,” this new technique…COVID-bit Attack Targets Air-Gapped Systems Via Power-Sup…
Qualys researchers demonstrated how to chain a new Linux flaw with two other two issues to gain full root privileges on an impacted system.
The NSA and CISA released the guide '' Securing the Software Supply Chain: Recommended Practices Guide for Developers '' last month and while David Wheeler, th…
Numerous bugs riddled the security of the Chinese-made Yunmai Smart Scale devices. The vulnerabilities specifically…Chaining Yunmai Smart Scale App Vulnerabili…
Lookout, an endpoint-to-cloud cyber security company, have put together their cyber security predictions for 2022.1—Cloud connectivity and cloud-to-cloud conne…
While security issues are always huge for the crypto world, the vulnerability in the Polygon…Critical Polygon Blockchain Vulnerability Could Allow Withdrawing …
GnuTLS, a portable cryptography library, fails to validate alternate trust chains in some conditions. In particular this breaks connecting to servers that use …
It hasn't been a while that we heard of a wave of point-of-sale malware attacks across various US stores. HoweverUS Restaurant Chain Landry Discloses POS Malwa…
Landry's, a popular restaurant chain in the United States, has announced a malware attack on its point of sale (POS) systems that allowed cybercriminals to ste…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploite…
Poryadok, which operates 48 stores across 32 Russian cities, first reported technical problems on Sunday, saying its website, mobile app and physical stores we…
Security update
An update that solves 16 vulnerabilities, contains one feature and has two security fixes can now be installed.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.…
Go 1.27.2 and 1.26.9 arrived on Oct 8, 2026 with corrections for 15 security flaws.
The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised …
Jérémy Jean has confirmed that a maintainer's proposed patch stops the reproduced failure behind an nftables interval bug.
IntroductionSecurity teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my organization fail the …
A kernel crash tells defenders that something went wrong. It does not show whether an attacker can turn that failure into a useful capability, combine several …
Details have emerged about three now-patched security flaws in the OpenClaw personal artificial intelligence (AI) assistant that, if successfully exploited, co…
Most security mess starts as admin work. A link gets clicked. A tool gets trusted. A bucket name gets reused. A setting stays loose because nobody wants to tou…
The Common Unix Printing System (CUPS) still sits on millions of Linux systems, usually in the background, rarely monitored, and often trusted more than it sho…
