cybersecurity Archives - Page 4 of 19 - TuxCare

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Future of IoT Live Patching:...

Unpatched devices often have known security vulnerabilities that could be exploited by attackers IoT live patching keeps devices online and operational even during security updates, reducing downtime Automated patching solutions...

Streamlining Cybersecurity with Enterprise Live...

  Enterprise live patching services are essential in proactive cybersecurity strategies. There is no need to reboot the system when using the live patching method. TuxCare provides automated live patching...

Konni RAT Malware Attack: Russian...

In a recent revelation, German cybersecurity firm DCSO has uncovered the Konni RAT malware attack, which involves the deployment of a Remote Access Trojan. The attackers ingeniously exploited an installer...

Cybersecurity in Review: The Alarming...

Quick question: when is it ok to run a networked system without updates?  If the answer takes more than 1 second and is anything other than “never,” we need to...

Lack of Network Segmentation in...

This article is part of a series where we look at a recent NSA/CISA Joint Cybersecurity Advisory on the top cybersecurity issues identified during red/blue team exercises operated by these...

Orange Spain Outage: BGP Traffic...

In a recent cybersecurity incident, Orange Spain faced a significant internet outage on January 3, 2024. A threat actor, going by the name ‘Snow,’ exploited vulnerabilities in the company’s RIPE...

3 Malicious PyPI Packages Hide...

In a recent cybersecurity revelation, the Python Package Index (PyPI) has fallen victim to the infiltration of three malicious packages: modularseven, driftme, and catme. These packages, although now removed, managed...

SMTP Smuggling: Hackers Exploit New...

In the ever-evolving landscape of cyber threats via email, a novel exploitation technique has emerged – Simple Mail Transfer Protocol – SMTP smuggling. This method, when wielded by threat actors,...

Default Configurations of Software and...

This article is part of a series where we look at a recent NSA/CISA Joint Cybersecurity Advisory on the top cybersecurity issues identified during red/blue team exercises operated by these...

WinRAR Flaw: LONEPAGE Malware Strikes...

In the realm of cybersecurity, vigilance is paramount, and recent developments reveal a persistent threat facing Ukrainian entities. In mid-2023, the Ukrainian CERT issued advisory #6710, unmasking a threat actor...

Understanding the Terrapin Attack: A...

Researchers at Ruhr University Bochum have discovered a new threat to OpenSSH security known as the Terrapin attack. This sophisticated attack manipulates sequence numbers during the handshake process, compromising the...