Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A vulnerability in libhttp-date-perl affects multiple Ubuntu versions, allowing specially crafted input to cause excessive resource usage and potential denial …
openSUSE has released a security update for trivy addressing three vulnerabilities, which includes fixes for privilege escalation and credential forwarding, av…
A security update for .NET 9.0 on Rocky Linux 9 addresses several vulnerabilities and includes bug fixes and enhancements, with updated SDK and runtime version…
A security update for .NET 8.0 on Rocky Linux 9 addresses multiple vulnerabilities, including denial of service and privilege escalations, with new SDK and run…
Rocky Linux 10 has released an important update for .NET 9.0, fixing multiple vulnerabilities, enhancing security, and addressing various bugs with specific ne…
A Linux server can be fully patched, hardened, and compliant, yet still leave investigators unable to explain how an attacker got in. Without reliable Linux lo…
A critical update for .NET 9.0 on Rocky Linux 8 addresses multiple security vulnerabilities and includes bug fixes, with new versions available for SDK and run…
The Fedora update notification details several nginx module rebuilds and a version update to fix critical vulnerabilities, including CVE-2026-42533, while prov…
Ubuntu Security Notice USN-8596-1 details several security vulnerabilities in the Linux kernel affecting Ubuntu 22.04 and 24.04, requiring immediate system upd…
Fedora 43 has released kernel version 7.1.4-104, addressing security issues and containing updates. Users can upgrade using the dnf command line tool.
Most Linux teams don't struggle to find vulnerabilities anymore. They struggle to decide which ones deserve attention first. Between daily scanner results, ven…
Multiple vulnerabilities were discovered in Roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in cross-site scripting, se…
An update that solves eight vulnerabilities, contains two features and has three security fixes can now be installed.
An update that solves 44 vulnerabilities, contains two features and has five security fixes can now be installed.
An update that fixes 8 vulnerabilities is now available.
It was discovered that there was a potential buffer overflow in xz-utils, a popular data-compression utility and library. CVE-2026-34743 If the lzma_index_deco…
Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda) …
An update that solves nine vulnerabilities and contains one feature can now be installed.
A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the grid it runs on, with no explo…
Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archi…
An update that fixes 7 vulnerabilities is now available.
F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted H…
Multiple vulnerabilities were discovered in roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in account takeover, cross-…
An update that fixes one vulnerability is now available.
