Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal…
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows develo…
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells …
An update that solves 110 vulnerabilities, contains 10 features and has seven security fixes can now be installed.
An update that solves 110 vulnerabilities, contains 10 features and has seven security fixes can now be installed.
An update that solves 86 vulnerabilities, contains 10 features and has two security fixes can now be installed.
An update that solves 86 vulnerabilities, contains 10 features and has two security fixes can now be installed.
An update that solves 124 vulnerabilities, contains three features and has seven security fixes can now be installed.
An update that solves 124 vulnerabilities, contains three features and has seven security fixes can now be installed.
An update that solves four vulnerabilities, contains one feature and has 60 fixes can now be installed.
Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under…
Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script refere…
Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script refere…
Users who can read logs or create Kubernetes resources could obtain Google Cloud credentials they are not allowed to read directly, according to two new report…
New expat packages are available for Slackware 15.0 and -current to fix security issues.
An update that solves 20 vulnerabilities and contains two features can now be installed.
An update that solves 508 vulnerabilities, contains seven features and has 20 security fixes can now be installed.
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal …
Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, and Windows systems that still rely on passwords alone. Speco…
Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator …
GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in…
An update that solves 34 vulnerabilities and contains one feature can now be installed.
An update that solves 34 vulnerabilities and contains one feature can now be installed.
An update that solves 34 vulnerabilities and contains one feature can now be installed.
