The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Cisco is warning of attempted exploitation of a security flaw in its IOS Software and IOS XE Software that could permit an authenticated remote attacker to ach…
Microsoft warns over recent work by the '8220' malware gang to compromise Linux systems and install cryptomining malware.
The Russian government on Thursday warned of cyber attacks aimed at domestic critical infrastructure operators, as the country's full-blown invasion of Ukraine…
Network-attached storage (NAS) appliance maker QNAP on Tuesday released a new advisory warning of a cryptocurrency mining malware targeting its devices, urging…
Ivanti, the company behind Pulse Secure VPN appliances, has published a security advisory for a high severity vulnerability that may allow an authenticated rem…
An anonymous hacker today publicly revealed details and proof-of-concept exploit code for an unpatched, critical zero-day remote code execution vulnerability i…
A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin. The fla…
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.11. This addresses security advisories …
Update to 2.35: https://nix.dev/manual/nix/2.35/release-notes/rl-2.35.html Version 2.35.3 addresses: CVE-2026-110450 (High, https://github.com/NixOS/nix/securi…
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Update Django 5 to version 5.2.18 Fixes CVE-2026-77050 [low]: Potential denial-of-service vulnerability in get_supported_language_variant() Fixes CVE-2026-8442…
Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating dist…
Several vulnerabilities have been discovered in the WebKitGTK web engine, that may lead to heap corruption, local privilege escalation, remote code execution, …
FreeIPA 4.13.4 security release Upstream release notes: https://www.freeipa.org/release-notes/4-13-4.html
Attackers are exploiting a critical Cisco ISE flaw that can open the product’s web management interface without a valid login. Cisco disclosed CVE-2026-76460 o…
The Fedora 43 update for NextCloud version 34.0.3 addresses multiple security vulnerabilities including XSS and prototype pollution, enhancing the file sync an…
Fedora 44 has released an update for NextCloud version 34.0.3, addressing multiple security vulnerabilities including cross-site scripting and prototype pollut…
Ubuntu has issued a security notice addressing multiple vulnerabilities in the Linux-nvidia-6.17 kernel for version 24.04 LTS, urging users to update and reboo…
Fedora 43 has released an update for DokuWiki, fixing a bypass issue in the "disableactions" mechanism, enhancing its usability in documentation without needin…
Multiple vulnerabilities in Bind9 affecting various Ubuntu LTS versions have been addressed, potentially allowing remote attacks leading to impersonation, deni…
A security update for Ubuntu 14.04 LTS addresses multiple vulnerabilities in the Linux kernel, potentially allowing system compromise. Users should update and …
Debian's advisory DLA-4736-1 addresses two Django vulnerabilities: potential denial-of-service from long language codes and cross-site scripting via unvalidate…
Ubuntu released security notice USN-8630-1 addressing vulnerabilities in the Linux kernel for various systems, requiring users to update and reboot their insta…