Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update pcre2 to 10.49, fixing security issues (CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161, CVE-2026-89162, …
A buffer overflow was discovered in the handling of dBASE database files in LibreOffice, which could potentially result in the execution of arbitrary code. For…
Several vulnerabilities were discovered in the zlib compression library, which could result in denial of service or potentially the execution of arbitrary code…
WordPress 6.9.11 Security Release Security updates included in this release A weakness in the WordPress upgrade process which can lead to remote code execution…
WordPress 6.9.11 Security Release Security updates included in this release A weakness in the WordPress upgrade process which can lead to remote code execution…
A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are config…
Cybersecurity researchers have disclosed details of a now-patched vulnerability that could be exploited to bypass Lockdown Mode protections in OpenAI ChatGPT. …
ntfs-3g is a read-write NTFS driver for FUSE. A crafted NTFS filesystem can crash the mount helper or the ntfsprogs tools, or disclose process memory. ntfs-3g …
A critical finding can move through several security tools and still leave the organization exposed. The vulnerability has a severity score, and a ticket has r…
October 2026 brought another wave of cyber threats targeting US businesses, with attackers exploiting trusted platforms, legitimate authentication processes, a…
SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched. Details of the secur…
SonicWall warned customers of two security flaws affecting end-of-life Global Management System (GMS) systems that will not be patched.…
Fixed kernels for a use-after-free vulnerability in the Linux kernel's IPv4 TCP code are now available for Red Hat Enterprise Linux 8, 9, and 10, while Ubuntu'…
A vulnerabilitiy was discovered in git-annex, a tool to manage large files with git, without storing the file contents in git, which could result in data exfil…
Over 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks.…
Two critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week. Langflow is an open…
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least O…
Several vulnerabilities have been found in aiohttp, an asynchronous HTTP client/server framework for asyncio and Python. CVE-2025-53643 Request smuggling vulne…
Multiple security vulnerabilities were discovered in imagemagick, a software suite used for editing and manipulating digital images, which could lead to denial…
fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519352)
fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519351)
An issue has been found in cyrus-sasl2, a SASL (Simple Authentication and Security Layer) implementation for the Cyrus mail system. The issue is related to a h…
Flaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes, and impersonate subscri…
One cyber firm listed a half-dozen exploitations of the PHP2Shell bugs, and another identified a well targeted, suspected Chinese campaign that breached U.S. "…
