Announcements

MA-1479.072026: MyCERT Advisory - Recent Ransomware Activities Observed: Best Practices for Prevention and Mitigation

  • 22nd August 2026
On July 26, 2026, Malaysia’s national cybersecurity agency MyCERT published an advisory warning of a recent increase in ransomware activity targeting websites and online platforms. Ransomware is a type of malicious software that can lock up your website’s files, databases, and stored data, with attackers demanding payment to restore access. An ...
Continue reading

MLflow MLflow: MLflow Server-Side Request Forgery Vulnerability

  • 22nd August 2026
A security flaw has been identified in MLflow, a tool used to manage machine learning workflows that some users run on their hosting accounts. This is a server-side request forgery (SSRF) vulnerability, a type of weakness that lets attackers trick the MLflow service into sending requests to systems that are meant to be private and inaccessible ...
Continue reading

TrueConf Server: TrueConf Server Missing Authentication for Critical Function Vulnerability

  • 22nd August 2026
A security flaw has been found in TrueConf Server, a video conferencing tool some hosting customers use for team and client calls. The issue is caused by missing authentication checks for a critical part of the software, meaning normal login requirements are not in place for this specific function. An attacker who can access your server through ...
Continue reading

TrueConf Server: TrueConf Server Code Injection Vulnerability

  • 22nd August 2026
A security flaw has been identified in TrueConf Server, a service some users run on their hosted accounts. This is a code injection vulnerability, a type of issue that allows unauthorized parties to insert and run harmful, unapproved code on a system.To exploit this flaw, an attacker would need unauthorized network access to port 4307/TCP, the ...
Continue reading