Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Two security issues were found in TIFF, a widely used format for storing image data, as follows: CVE-2020-19131
Due to a data race in the crossbeam-deque in the crossbeam crate, one or more tasks in the worker queue could have been be popped twice instead of other tasks …
The U.S. government on Wednesday announced the formation of a new Civil Cyber-Fraud Initiative that aims to hold contractors accountable for failing to meet re…
A previously undocumented threat actor has been identified as behind a string of attacks targeting fuel, energy, and aviation production industries in Russia, …
Security teams at mid-sized organizations are constantly faced with the question of "what does success look like?". At ActZero, their continued data-driven app…
Several problems were corrected in TagLib, a library for reading and editing audio meta data. CVE-2017-12678
Two issues have been found in curl, a command line tool and an easy-to-use client-side library for transferring data with URL syntax.
- fix disclosure of HTTP auth credentials via SNI data (CVE-2021-38165)
Most Linux distros are currently coming up short from offering adequate security around full disk encryption and authenticated boot. Prominent Linux developer …
An "insidious" new SMS smishing malware has been found targeting Android mobile users in the U.S. and Canada as part of an ongoing campaign that uses SMS text …
- fix disclosure of HTTP auth credentials via SNI data (CVE-2021-38165)
A newly discovered side-channel attack demonstrated on modern processors can be weaponized to successfully overcomeÂSite Isolation protectionsÂweaved into Goog…
In use for a decade as the de facto standard for communicating software bills of materials, The Linux Foundation has announced that the Software Package Data E…
The operators behind the REvil ransomware-as-a-service (RaaS)ÂstagedÂa surprise return after a two-month hiatus following the widely publicized attack on techn…
A critical security vulnerability ( CVE-2021-40346 ) has been disclosed in HAProxy , a widely used open-source load balancer and proxy server, that could be ab…
A critical security vulnerability has been disclosed inÂHAProxy, a widely used open-source load balancer and proxy server, that could be abused by an adversary…
- fix disclosure of HTTP auth credentials via SNI data (CVE-2021-38165)
Microsoft's Active Directory isÂsaid to be used by 95%Âof Fortune 500. As a result, it is a prime target for attackers as they look to gain access to credentia…
Several vulnerabilities have been discovered in Exiv2, a C++ library and a command line utility to manage image metadata which could result in denial of servic…
Google and Microsoft said they are pledging to invest a total of $30 billion in cybersecurity advancements over the next five years, as the U.S. governmentÂpar…
Due to privacy blunders in Microsoft Power Apps, many firms from different sectors leaked data…Misconfigurations in Microsoft Power Apps Leaked Millions Of Rec…
Updated libass packages fix security vulnerability: libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and p…
I'm sure you would agree that, in today's digital world, the majority of applications we work on require some type of credentials ' to connect to a database wi…
ShadowPad, an infamous Windows backdoor that allows attackers to download further malicious modules or steal data, has been put to use by five different Chines…
