WordPress: Vulnerability Lets Authenticated Attackers Execute Code via File Upload
A WordPress vulnerability lets authenticated attackers upload malicious PostScript files to execute arbitrary code on the server.
News & Knowledge
News, guides and insights on hosting, security and IT.
Oracle Java SE: Vulnerabilities Affect Confidentiality, Integrity and Availability
Oracle has reported multiple vulnerabilities in Java SE that allow remote attackers to impact confidentiality, integrity and availability.
Lenovo BIOS: Multiple Vulnerabilities Give Attackers Deep System Access
Multiple BIOS vulnerabilities in Lenovo computers allow code execution, data manipulation and privilege escalation at the system level.
Firefox Vulnerability: Saved PDF Content Can Overwrite Files on the System
A Mozilla Firefox vulnerability allows saved PDF content to overwrite other files on the system.
Why Phishing Fails Against FIDO2 and Passkeys
Phishing-resistant sign-in with FIDO2 and passkeys makes stolen credentials worthless and forms the foundation for a solid zero trust architecture.
Survey: 90 Percent of VMware Customers Are Looking at Alternatives
A Rimini Street survey finds 90 percent of VMware customers are weighing alternatives due to higher license costs, but most favor a hybrid approach.
Atlassian Warns of Critical Flaw in Data Center Products
A critical flaw in Atlassian Data Center products lets attackers read files from the web app without logging in and can lead to privilege escalation.
Anthropic Merges Its Cyber Programs and Introduces Three Access Tiers for Claude
Anthropic merges Project Glasswing and the Cyber Verification Program and splits access to Claude's extended cyber capabilities into three tiers.
Cloud as Critical Infrastructure: Why Digital Sovereignty Matters Now
Cloud platforms have become critical infrastructure, and who operates and controls them shapes the ability of companies and states to act.