Malware & Exploits Archives - Page 5 of 8 - TuxCare

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

The INCEPTION Vulnerability affecting AMD’s...

Some information found in this blog post has been sourced from an AMD security bulletin as well as a Phoronix article covering a speculative side-channel attack termed “INCEPTION.”   Shortly...

CVE-2023-4911 Looney Tunables – Th-Th-That’s...

Vulnerability: Buffer overflow in glibc’s parsing of GLIBC_TUNABLES environment variable CVE ID: CVE-2023-4911 CVSS Score: 7.8 TuxCare’s Extended LifeCycle Support status can be found in the TuxCare CVE tracker here. ...

Cyber Risk’s Sensational Return to...

Ah, the sweet residue of summer vacations! It’s that time when IT professionals, having (hopefully) soaked up enough sun, reluctantly drag themselves back to their desks, half-expecting a somewhat calm...

CVE-2023-4863: Just How Deep Does...

Vulnerability: Heap Buffer Overflow in libwebp CVE ID: CVE-2023-4863 CVSS Score: 8.8 (Though a different CVE merged into this one was scored 10.0. The 8.8 score will likely be updated...

When the House Lost: Lessons...

…or how to steal 15 million USD from a casino without resorting to “Ocean’s Eleven”-level shenanigans.   When data breaches and ransomware attacks are becoming increasingly commonplace, even the glitzy...

The Heartbleed Bug: Lessons Learned...

The Heartbleed bug, a critical vulnerability in the OpenSSL library, resulted in a severe cybersecurity event affecting millions of systems all over the world. This vulnerability exposed a lot of...

The Downfall (Gather Data Sampling)...

Some information found in this blog post has been sourced from a Red Hat advisory, Intel’s Gather Data Sampling Technical Paper, and Intel Security Advisory INTEL-SA-00828.   A vulnerability called...

Protecting Your Infrastructure Against Heartbleed:...

In the wake of high-profile security breaches, the tech world has become more cognizant of the necessity for effective, end-to-end infrastructure protection strategies. This awareness has brought to the limelight...

Linux Patching for Protection Against...

Cyberattacks that involve ransom demands are a common and serious danger to organizations of all kinds in today’s digital environment. It is crucial for organizations to employ robust security measures...

The Evolution of Threat Landscapes:...

In the continually shifting arena of cybersecurity threats, recent insights point towards a crucial change in the strategies adopted by threat actors. One key development is the emergence of ransomware...

Ransomware, Data Breaches and Data...

Cybersecurity in healthcare institutions today are under increasing threat from cyberattacks, with ransomware, data breaches, and data theft becoming more prevalent. The complexity of healthcare infrastructures, connecting patients, doctors, clinical...