Pronetsys blog
Vulnerabilities, threats and security alerts affecting businesses and users.
A flaw in OpenSSH lets attackers log into accounts on Alpine Linux servers and other musl-based systems without a password, in a single connection. OpenSSH and Alpine have fixed it: who is exposed and what to do.
Google and its partners took down XCPE, a network of more than 1.3 million Android TV boxes with malware installed at the factory by Videostrong. Which devices to check in your business and how to isolate them.
CISA confirmed that attackers chain the PHP2Shell flaws with Fragnesia, a Linux kernel vulnerability, to gain full control of servers and firewalls. What to update and how to check.
Between October 28 and 29, attacks were confirmed against online stores built with Drupal Commerce, GitLab servers and Cisco firewalls with VPN. Fixed versions and what to check.
The US cybersecurity agency added several vulnerabilities in firewalls, email gateways and backup servers to its list of exploited flaws. Which devices are at risk and what to do.
Between October 15 and 18, two attacks on plugin vendors installed malicious code on WordPress sites: a tampered version of Rank Math PRO and stolen UpdraftCentral keys. How to check your site.
A global campaign uses stolen passwords to take over FortiGate firewalls and VPNs. The FBI issued an alert and an analysis by Hudson Rock places Colombia among the hardest-hit countries.
On October 13, Microsoft released fixes for 1,411 flaws and three zero-days, one already exploited. Windows 11 24H2 Home and Pro also stopped receiving patches.
Eight intermediate certificates from the certificate authority eMudhra had guessable private keys; one was the number 4. Browsers have already blocked them, but other systems need to be updated.
We help you review patches, backups and access before a vulnerability turns into an incident.
Esta página también está disponible en español.
Ver en español