Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Integrating the Graph for Understanding Artifact Composition (GUAC) in the open-source security framework has tremendous potential to improve software supply c…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting JetBrains TeamCity On-Premises software t…
Identity Data Management and Analytics Provider Radiant Logic Joins Okta and Ping Identity in Partnership…Badge Launches Partner Program to Expand Availability…
The current large surge in cyber threats has left many organizations grappling for security so…ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: …
Roundcube Webmail could allow cross-site scripting (XSS) attacks.
Details have emerged about a now-patched high-severity security flaw in Apple's Shortcuts app that could permit a shortcut to access sensitive information on t…
A novel malware campaign has been observed targeting Redis servers for initial access with the ultimate goal of mining cryptocurrency on compromised Linux host…
The U.K. National Crime Agency (NCA) on Tuesday confirmed that it obtained LockBit's source code as well as a wealth of intelligence pertaining to its activiti…
Another threat surfaces online for mobile phone users that targets Android and iOS devices alike.…New Gold Pickaxe Malware Aims To Steal Users’ Faces on Latest…
The infamous malware loader and initial access broker known as Bumblebee has resurfaced after a four-month absence as part of a new phishing campaign observed …
* bsc#1218174 Affected Products: * Containers Module 15-SP5 * openSUSE Leap 15.5
Affected Products: * Containers Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5
We’re living in an increasingly digitized world. And with digitization comes a necessity to protect…10 Reasons to Invest in Security Awareness Training on Late…
The Linux Foundation recently published a report titled Maintainer Perspectives on Open Source Software Security , which provides valuable insights into the pe…
Data security in a modern business environment is considered one of the most critical factors for any company. The digitalization of the world has led to more …
Multiple vulnerabilities have been found in containerd, the worst of which could result in privilege escalation.
Microsoft on Friday revealed that it was the target of a nation-state attack on its corporate systems that resulted in the theft of emails and attachments from…
A new Python-based hacking tool called FBot has been uncovered targeting web servers, cloud services, content management systems (CMS), and SaaS platforms such…
Mobile network operator Orange Spain suffered an internet outage for several hours on January 3 after a threat actor used administrator credentials captured by…
Heads up, WordPress admins! Ensure updating your websites at the earliest as a severe remote…New WordPress Update Addressed A POP Chain RCE Vulnerability on La…
Chipmaker Qualcomm has released more information about three high-severity security flaws that it said came under "limited, targeted exploitation" back in Octo…
The Unified Extensible Firmware Interface (UEFI) code from various independent firmware/BIOS vendors (IBVs) has been found vulnerable to potential attacks thro…
BOSTON, MASS. and TEL AVIV, ISRAEL, November 28, 2023 - A severe design flaw in…Design Flaw in Domain-Wide Delegation Could Leave Google Workspace Vulnerable f…
A new variant of the Agent Tesla malware has been observed delivered via a lure file with the ZPAQ compression format to harvest data from several email client…
