Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
CRYPTO-GRAM is a free monthly newsletter providing summaries, analyses, insights, and commentaries on computer security and cryptography. In this issue, Random…
Daniel Roberts discovered a binary named "ABfrag" on one of his servers after detecting suspicious network activity. He sent in a note requesting anyone with i…
Vendors have not issued updates yet for a vulnerability just reported by the Squid Project. "Under some conditions Squid may forward the proxy authentication c…
On Tuesday June 26, 2001, a hacker named 'ThePike' managed to deface the European defacement mirror Alldas.de. Visitors to the site saw a modified news banner …
Google Cloud VMs on AMD Turin chips need a guest OS patch and a stop-and-start to protect against three CPU side-channel flaws, Google said this week. The comp…
A customer tags your company in a complaint about a refund that they haven’t received yet. Below this post is another account posting with your company’s logo …
An iOS sandbox escape published on GitHub lets an app read other apps' files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login …
At some point your security will fail. This isn’t pessimism. It’s not because your team and tools aren’t sophisticated enough. It’s the reason we have detectio…
An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security …
The South Asian cyber espionage group known as Bitter (aka APT-C-08, APT-Q-37, Hazy Tiger, Orange Yali, T-APT-17, and TA397) has been observed targeting South …
Update to upstream version 5.4.7. reposync: add --latest-limit=N option dnf5-plugin config-manager: add vendor policy management commands offline: Wait for shu…
Mark Rasch writes: Imagine a company gets hacked and hires a law firm to manage the response. The lawyers coordinate the forensic investigation, determine whic…
A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not th…
This is a cumulative bug-fix update, including multiple security fixes. Note that there is a change to some defaults: max_parts is now set to 1000 and max_dept…
This is a cumulative bug-fix update, including multiple security fixes. Note that there is a change to some defaults: max_parts is now set to 1000 and max_dept…
How much damage can someone do without breaking much? Quite a lot, it seems. A stolen login can open doors across several systems. A trusted setting can be use…
November 3, 2026: ROCHESTER, N.Y.-U.S. Attorney Michael DiGiacomo announced today that a federal grand jury has returned an indictment charging Ryan James Roac…
Two flaws in the Xen hypervisor can let a malicious virtual machine reach memory that belongs to other parts of the same computer. That includes the powerful m…
Ukraine's security service has fired two senior officials amid a corruption investigation into an alleged criminal network that bribed law enforcement officers…
A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin. The fla…
Attackers remotely changed the settings on refrigeration controls at supermarkets in Belgium, Sweden, Estonia and other European countries overnight into Monda…
Update to v1.4.3 (rhbz#2549665): Security fixes: - [SEC] Fix potential buffer overflow in Record&Play plugin (PR #3688) - [SEC] Fix master/helper session switc…
Update to v1.4.3 (rhbz#2549665): Security fixes: - [SEC] Fix potential buffer overflow in Record&Play plugin (PR #3688) - [SEC] Fix master/helper session switc…
Multiple vulnerabilities were found and fixed in Vim, an enhanced version of the standard UNIX editor Vi (Vi IMproved). A remote attacker could trigger arbitra…
