As cyber threats grow in complexity and frequency, staying informed about vulnerabilities is essential for all system administrators and hosting providers. One recent vulnerability, known as CVE-2025-8001, poses significant risks to Windows-based systems, but it extends to relevant Linux server environments as well. This blog post dives into the vulnerability, why it matters for server […]

The cybersecurity landscape constantly evolves, with vulnerabilities emerging regularly. One such recent threat is CVE-2025-10621, which affects the SourceCodester Hotel Reservation System. This article explores the incident, its implications for server security, and practical steps system administrators can take to safeguard their infrastructure. Overview of CVE-2025-10621 CVE-2025-10621 is a critical SQL injection vulnerability found in […]

As cyber threats grow in complexity and frequency, staying informed about vulnerabilities is essential for all system administrators and hosting providers. One recent vulnerability, known as CVE-2025-8001, poses significant risks to Windows-based systems, but it extends to relevant Linux server environments as well. This blog post dives into the vulnerability, why it matters for server […]

The cybersecurity landscape constantly evolves, with vulnerabilities emerging regularly. One such recent threat is CVE-2025-10621, which affects the SourceCodester Hotel Reservation System. This article explores the incident, its implications for server security, and practical steps system administrators can take to safeguard their infrastructure. Overview of CVE-2025-10621 CVE-2025-10621 is a critical SQL injection vulnerability found in […]

I'm quite sure that you have one of the small office/home office (SOHO) devices at home to share the Internet access for your computers, smartphones and IoT gadgets. These devices are really great, as they are capable of routing and address translation, they often have a built-in switch, an access point and a user-friendly web-based […]

This summer, we were excited to team up with Site.pro. BitNinja is server security that’s ideal for web hosting companies and Site.pro offers the best website builder for webhosts, so it was a natural partnership. We sat down with CEO Filip Borcov to discuss the story behind Site.pro, the latest trends in website builders and […]

Imagine Andrew, who has many servers. He doesn’t want sleepless nights worrying about hacker and bot attacks, that’s why he uses BitNinja. His servers are very important to him, so he likes checking up on how BitNinja working on them. Andrew logs into the Dashboard every day, and a few weeks ago, realised that there […]

In computer science, the term of availability is used to describe the period of time when a service is available. High availability is a quality of a system that assures high-level performance for a given period of time. The main goal of high availability is to eliminate the Single Point of Failures (SPoF) in your infrastructure. To […]

IP address spoofing is a technique used by hackers to disguise their IP address as another IP and gain access to sensitive information or access private services on authorized networks. In some special cases, they can create IP packets that contain a false source IP address and this way hide their original address or impersonate […]

The internet is undoubtedly one of the mankind's greatest achievements which now has more than one billion websites on it. However, something being great doesn’t imply that is also safe and that is the case with our beloved creation. Here, we are going to show you 10 types of sites (or a site in particular) […]

In the previous part of the article, we had looked at some incidents to better understand how attackers try to find SQL injection vulnerabilities. Instead of looking for other incidents, I’ve decided to write a short introduction about testing your own application using publicly available automatic tools. Constantly searching for vulnerabilities on your web applications and services […]

In December 2015 and 2016, there were two blackouts in Ukraine that caused hundreds of thousands of Ukrainians to endure the notorious eastern cold winter for a few hours. At first, this wasn’t an alarming event, as blackouts can happen anywhere and anytime. However, the scale of it made people suspicious about it. The Hacking […]

We always keep our eyes on the logs, data, and charts. We always see abnormalities and unusual behaviours, we have found botnets before, but our recent catch is one of the biggest. These cases are really hard to handle due to the huge number of affected IPs. On the evening of 14th June, we have […]

The CVE-2025-23268 vulnerability poses a significant risk to users of the NVIDIA Triton Inference Server. Identified in the DALI backend, this flaw allows for improper input validation. Incident Summary This vulnerability could enable attackers to exploit the system, leading to potential code execution. Given the increasing reliance on inference servers for AI processes, the implications […]

The recent revelation of a vulnerability affecting NVIDIA's BMC (Baseboard Management Controller) raises an alarm for system administrators and hosting providers. This flaw allows unauthorized access to critical systems, significantly risking server security. Incident Summary NVIDIA's HGX Management Controller (HMC) contains a vulnerability that could allow a malicious actor, already possessing access to the BMC, […]

The cybersecurity landscape is ever-changing. Recent vulnerabilities can expose systems to significant threats. One such incident is CVE-2025-10166, affecting the Social Media Shortcodes plugin for WordPress. This issue highlights critical weaknesses in server security that administrators must address. Understanding CVE-2025-10166 This vulnerability arises from Stored Cross-Site Scripting (XSS) in versions of the Social Media Shortcodes […]