Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode. This also leak …
California Attorney General Rob Bonta announced a settlement under which 23andMe's successor will pay $6 million to resolve allegations that the company did no…
The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student protest movement, was infected with NSO Group's …
In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a record is created or a case is updated, and the Flow passes data …
Update Django 5 to version 5.2.18 Fixes CVE-2026-77050 [low]: Potential denial-of-service vulnerability in get_supported_language_variant() Fixes CVE-2026-8442…
Update Django 5 to version 5.2.18 Fixes CVE-2026-77050 [low]: Potential denial-of-service vulnerability in get_supported_language_variant() Fixes CVE-2026-8442…
Update Django 6 to version 6.1.2 Fixes CVE-2026-77050 [low]: Potential denial-of-service vulnerability in get_supported_language_variant() Fixes CVE-2026-84429…
Debra Ahmed reports: An unprotected database linked to India-based AI software development and IT services company Vibetech exposed 13.7 million records contai…
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-s…
Cloud security for small business means protecting accounts, data, devices, and workloads while understanding which responsibilities belong to the provider. Mo…
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability,…
Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over. T…
Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating dist…
The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9.62 million) for illegally relaying Gri…
UpGuard provides another entry for our “No need to hack when it’s leaking” files. This time, it’s Liberating Research. On August 31, Greg Pollock from UpGuard …
Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw fo…
In environments studied for the 2026 State of Agent Security Report, roughly 1,280 third-party products now embed AI. About 282 of them sit behind single sign-…
SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company's network and applications.…
A report by a Labour MP and an academic argues that if the British public cannot see what Russian activity costs, it cannot weigh that burden against the cost …
In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol d…
Several vulnerabilities were discovered in node-lodash, a Node.js module providing utility functions for common programming tasks. CVE-2025-13465 Prototype pol…
Justin Doubleday reports: The Department of Homeland Security is preparing this year to award a major cloud, cybersecurity and network services contract aimed …
It was discovered that incomplete validation of MS-PPPE packets in radsecproxy, a Radius protocol proxy, could result in denial of service or potentially the e…
Several vulnerabilities have been discovered in the WebKitGTK web engine, that may lead to heap corruption, local privilege escalation, remote code execution, …
