Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Google, Meta and TikTok each filed suit in federal court against an incoming California law that blocks platforms from deploying features considered “psycholog…
A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are config…
A critical finding can move through several security tools and still leave the organization exposed. The vulnerability has a severity score, and a ticket has r…
A WordPress vulnerability is being used in attacks that target the moment a site updates its main software.
A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The atta…
Two flaws in the Xen hypervisor allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on the same host, including dom0. Dom0 i…
A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin. The fla…
An update that fixes one vulnerability is now available.
Several security issues were found in Squid, a caching proxy for the web. These issues could allow request smuggling, buffer overflows or FTP command injection…
Your team is remediating more vulnerabilities than ever, yet your breach risk has barely changed. You’re spending too much time and effort on exposures attacke…
New expat packages are available for Slackware 15.0 and -current to fix security issues.
A vulnerabilitiy was discovered in git-annex, a tool to manage large files with git, without storing the file contents in git, which could result in data exfil…
An update that fixes 21 vulnerabilities is now available.
Multiple vulnerabilities were found in strongSwan, an IKE/IPsec suite. CVE-2026-78123 An undefined memory access vulnerability in the openssl plugin when handl…
Over 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks.…
Update to the latest upstream release Vulnerability fix CVE-2026-85518: Fix path traversal when dumping SDS components Maintenance, bug fix Lock test_file for …
Update to the latest upstream release Vulnerability fix CVE-2026-85518: Fix path traversal when dumping SDS components Maintenance, bug fix Lock test_file for …
Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script refere…
An issue has been found in cyrus-sasl2, a SASL (Simple Authentication and Security Layer) implementation for the Cyrus mail system. The issue is related to a h…
An update that solves nine vulnerabilities and contains one feature can now be installed.
An update that solves nine vulnerabilities and contains one feature can now be installed.
An update that fixes 52 vulnerabilities is now available.
One cyber firm listed a half-dozen exploitations of the PHP2Shell bugs, and another identified a well targeted, suspected Chinese campaign that breached U.S. "…
Google on Wednesday took the wraps off Gemini 4 Carbon, its latest frontier model with state-of-the-art cybersecurity and long-horizon capabilities. "It shows …
