Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
This update bumps the bundled lodash to 4.17.23 to ensure openQA is protected against CVE-2025-13465. It likely was not vulnerable in any case, though, as I do…
A vulnerability has been discovered in the telnetd module of inetutils, which allows remote code execution as root.
MariaDB 11.8.5 Release notes: https://mariadb.com/docs/release-notes/community- server/11.8/11.8.5
MariaDB 10.11.15 Release notes: https://mariadb.com/docs/release-notes/community- server/10.11/10.11.15
Changes with nginx 1.28.1 23 Dec 2025 *) Security: processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail…
Update brotli to 1.2.0. This update provides the necessary Python APIs in python3-brotli to fix denial- of-service security issues related to u201cdecompressio…
Update brotli to 1.2.0. This update provides the necessary Python APIs in python3-brotli to fix denial- of-service security issues related to u201cdecompressio…
Attackers are using a new Linux rootkit to compromise Cisco network devices and keep access long after the initial breach. The exploit begins in the SNMP servi…
Cybersecurity researchers have disclosed details of two security vulnerabilities impacting Supermicro Baseboard Management Controller (BMC) firmware that could…
The Windows banking trojan known as Coyote has become the first known malware strain to exploit the Windows accessibility framework called UI Automation (UIA) …
An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If…
Let's face it: threat actors are getting smarter, and malware isn't just for your typical Windows clickbait anymore. In recent years, the H2Miner botnet has go…
Security-conscious Linux admins have no shortage of tools at their disposal these days, but Parrot OS stands out as a versatile and privacy-focused solution th…
Picture this: It's July 2, 2025, and you're unwinding from a long day, only to hear about a zero-day vulnerability being actively exploited. If you're running …
Cybersecurity researchers have discovered a critical security vulnerability in artificial intelligence (AI) company Anthropic's Model Context Protocol (MCP) In…
Rebuild applications to apply two recent security updates: build with idna 1.0.0+ to address CVE-2024-12224 (idna accepts Punycode labels that do not produce a…
It was discovered that there was a potential remote code execution vulnerability in konsole, the X terminal emulator of the KDE desktop environmne.t
Ivanti has released security updates to address two security flaws in Endpoint Manager Mobile (EPMM) software that have been chained in attacks to gain remote …
Multiple vulnerabilties were discovered in u-boot, a boot loader for embedded systems.
Several vulnerabilities were discovered in the Erlang/OTP implementation of the SSH protocol, which may result in denial of service or the execution of arbitra…
A critical security vulnerability has been disclosed in the Erlang/Open Telecom Platform (OTP) SSH implementation that could permit an attacker to execute arbi…
Heads up, WinRAR users! A recently patched security flaw in WinRAR could allow mark-of-the-web (MotW)…A WinRAR Flaw Could Allow MotW Security Bypass on Latest …
Multiple vulnerabilties have been found in freelrdp2, a free implementation of the Remote Desktop Protocol (RDP) which potentially allows potential buffer over…
Cisco has released updates to address two critical security flaws Identity Services Engine (ISE) that could allow remote attackers to execute arbitrary command…
