A security flaw has been found in MLflow, a tool used to manage machine learning projects and related workflows. This flaw is a server-side request forgery (SSRF) vulnerability, meaning attackers can trick the MLflow service into sending unauthorized requests on its own behalf.This vulnerability lets bad actors use an affected MLflow instance to ...
Continue reading
A security vulnerability has been identified in TrueConf Server, a video conferencing and team collaboration platform that some of our clients use for their business operations.
The flaw is a missing authentication check for a critical core function of the software. This means an unauthorized person who can access the server's 4307/TCP network ...
Continue reading
A security flaw has been identified in TrueConf Server, a service some web hosting clients use on their servers. This is a code injection vulnerability, a type of issue that lets unauthorized users run unapproved code through the affected service.
To exploit this flaw, an attacker would need network access to port 4307/TCP on your server. If they ...
Continue reading
On July 20, 2026, Malaysia’s national cybersecurity response team MyCERT released a security advisory recommending security hardening steps for Microsoft SharePoint, following reports of new active exploitation attempts targeting the platform.
Microsoft SharePoint is a common tool used by organizations to host collaborative workspaces, shared ...
Continue reading
