Alibaba: Cloud and CDN Services
Alibaba provides cloud computing and CDN services. Its CDN supports QPACK dynamic table, making it susceptible to high amplification factors in CDN…
Tag: security
FBI Advisory on TeamPCP Supply Chain Attacks
The FBI issued an advisory on July 2, 2026, warning organizations about the persistent risk from exfiltrated data and credentials. It recommended…
Zimbra: Email Collaboration Software Vendor
Zimbra provides the Zimbra Collaboration Suite (ZCS), an email and collaboration platform. The company patched CVE-2026-73570 in version 10.1.20 and has been…
Ivanti: IT Asset Management and Security Solutions
Ivanti provides IT asset management, endpoint management, and security solutions, including Ivanti Sentry (formerly MobileIron Sentry).
Meta Enhances WhatsApp Security with Passkeys and Stronger Verification
Meta, the parent company of WhatsApp, announced new security features including multiple passkeys per account and an upgraded two-step verification password system…
Docker: Containerization Platform
Docker socket at /var/run/docker.sock was exploited by JADEPUFFER for host breakout, creating privileged containers with host PID namespace and root filesystem mounts.
Microsoft 365 Copilot: Enterprise AI Assistant Security
Microsoft 365 Copilot is the enterprise version of Microsoft's AI assistant. While not affected by CoSnitch, it has been subject to memory…
LiteSpeed Technologies: Web Server and Security Solutions
LiteSpeed Technologies is a company known for its high-performance web server software and security solutions, including the LiteSpeed cPanel plugin and WHM…
NGINX App Protect DoS Patched for Critical Vulnerability
NGINX App Protect DoS versions 4.3.0-4.7.0 are affected by CVE-2026-42055.
TROOPERS Security Conference
Annual security conference in Germany where ERNW GmbH researchers disclosed the Airoha Bluetooth vulnerabilities in June 2025.