Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Facebook is one of the world's biggest advertising platforms, and that's because it knows a lot about you, me, and everyone.Facebook uses many tools to track p…
An issue has been found in wget, a tool to retrieve files from the web. A race condition might occur as files rejected by an access list are kept on the disk f…
The illusion of security in IT is as fragile as a spiders-web; especially for a company that is built upon5 Reasons Every Company Requires A Network Audit for …
The Indonesian National Police in a joint press conference with Interpol and cybersecurity firm Group-IB earlier today announced the arrest of three Magecart-s…
It was discovered that there were a number of cross-site scripting vulnerabilities in cacti, a web interface for monitoring systems. For Debian 8 "Jessie", thi…
PayPal has confirmed a bug in its website that could expose users' email addresses and passwords. Considering the seriousness ofBug Hunter Nets $15K Bounty For…
Firefox could be made to crash or run programs as your login if it opened a malicious website.
When pasting a tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into c…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, data exfiltrati…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, data exfiltrati…
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform various Cross-Side Scripting (XSS) and Cros…
Simon Charette reported that the password reset functionality in Django, a high-level Python web development framework, uses a Unicode case-insensitive query t…
Extending the list of ransomware victims, now joins the Maastricht University (UM). As disclosed via their official website, Maastricht UniversityMaastricht Un…
The updated package fixes a security vulnerability: Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks. (CVE-…
Google's decision to truncate website URLs by hiding the ‘www’ in its Chrome browser troubled many users. Being the mostCreate Custom Extension To Bring Back '…
It was discovered that the Title blacklist functionality in MediaWiki, a website engine for collaborative work, could by bypassed. For the oldstable distributi…
LifeLabs, the largest provider of healthcare laboratory testing services in Canada, has suffered a massive data breach that exposed the personal and medical in…
Cybercriminals are busy innovators, adapting their weapons and attack strategies, and ruthlessly roaming the web in search of their next big score.Every manner…
It was discovered that there was a potential account hijack vulnerabilility in Django, the Python-based web development framework.
Attention WordPress users!Your website could easily get hacked if you are using "Ultimate Addons for Beaver Builder," or "Ultimate Addons for Elementor" and ha…
Russian law enforcement officers have raided the Moscow offices of Nginx'the company behind the world's second most popular web server software'over a copyrigh…
Are you a Google Chrome user? GoogleÂhas releasedÂthe Chrome 79 web browser for all supported platforms, including GNU/Linux, macOS, Windows, Android, and Chro…
It was found that Squid, a high-performance proxy caching server for web clients, has been affected by the following security vulnerabilities.
Several security vulnerabilities were found in Ruby that also affected Debian's JRuby package, a pure-Java implementation of Ruby. Attackers were able to call …
