Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Vercel is gradually rolling out Device Bound Session Credentials (DBSC) on its platform as a key defense against information stealer malware.…
The developers of Goddess of Victory: NIKKE have confirmed that hackers tampered with the game's PC launcher scripts in a supply-chain attack, distributing mal…
Some attacks this week didn't need much of a trick. A fake support call, a trusted extension, a shared link, or a device with no password. Small things that pe…
Update the lzma-rust2 crate to version 0.23.0. Update typed-path to version 0.13.0. Rebuild sccache with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-034…
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put …
In previous litigation involving Illuminate (J.M. v. Illuminate Educ. Inc.), the district court held that Illuminate could be considered a provider of healthca…
Multiple Ontario Crime Stoppers organizations have suspended use due to Navigate360’s data breach and unacceptable incident response; U.S. state education depa…
Nationwide lab test company Quest Diagnostics said one of its key systems may have experienced a breach of patient data.
The CA certificates in the nss package were updated.
The CA certificates in the ca-certificates package were updated.
An update that solves 9 vulnerabilities and has 9 bug fixes can now be installed.
An update that solves 15 vulnerabilities can now be installed.
AI-powered penetration testing can uncover complex attack paths, but safety restrictions and network limitations leave many assets and vulnerabilities untested…
The South African retail giant The Foschini Group (TFG) disclosed a cyberattack that disrupted IT systems at three of its British fashion brands, leaving some …
“We will continue to work closely with our partners to disrupt what’s left of the ShinyHunters group and their associates, no matter where they operate," FBI D…
OAuth grants create data highways between SaaS apps, AI agents, and other tools. And, they are multiplying faster than any security team can review them. As th…
The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platforms, including unsuccessful …
An update that solves 8 vulnerabilities and has 12 bug fixes can now be installed.
Security update
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial …
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial …
Debian announced multiple vulnerabilities in the Linux kernel, which could cause privilege escalation, denial of service, or information leaks, resolved in ver…
There are several reasons why Linux has such a good reputation and has become such a good standard across the world. It is the power behind most internet serve…
This week’s security news is mostly about weak spots.Browsers, bots, sandboxes, AI systems, and email flows all show the same problem in different ways. Everyt…
