Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
More than 4,300 internet-facing devices have been pulled into a newly documented router malware campaign called AryStinger. The infected systems are mostly not…
The difference between a virus and a worm is not semantic. A virus waits for a user to trigger it; a worm exploits vulnerabilities and spreads on its own. That…
An update that solves 21 vulnerabilities and contains one feature can now be installed.
An update that solves 21 vulnerabilities and contains one feature can now be installed.
An update that solves 21 vulnerabilities and contains one feature can now be installed.
An update that solves 21 vulnerabilities and contains one feature can now be installed.
The recent Keystone advisory is unusual because the vulnerabilities are scattered across several features but keep affecting the same class of security control…
CVE-2026-42530, the NGINX HTTP/3 vulnerability rated CVSS 9.2, is collecting dismissals because exploitation requires ASLR to be disabled or bypassed. Here is …
An update that solves seven vulnerabilities, contains three features and has 14 security fixes can now be installed.
Metric names and values are now validated to ensure they do not contain characters below ASCII 32 (including newlines), colon (":") or pipe ("|") characters th…
An update that solves four vulnerabilities and contains one feature can now be installed.
An update that fixes one vulnerability is now available.
An update that solves six vulnerabilities and contains one feature can now be installed.
New libidn packages are available for Slackware 15.0 and -current to fix security issues.
An update that solves 21 vulnerabilities and contains one feature can now be installed.
CVE-2026-20253 is a CVSS 9.8 pre-auth flaw in Splunk Enterprise's PostgreSQL sidecar service. An unauthenticated attacker can write files and chain the primiti…
CVE-2026-0257's GlobalProtect authentication bypass went from advisory to active exploitation in four days. The recurring pattern of perimeter device failures …
A CVSS 9.3 flaw in Check Point Remote Access VPN let unauthenticated attackers bypass certificate validation by supplying a crafted IKEv1 VendorID payload — ex…
Attackers are actively exploiting a high-severity vulnerability in Langflow, an open-source platform used to build and run AI workflows.
A high-severity security flaw in Langflow, an open-source low-code platform to build artificial intelligence (AI) applications, has come under active exploitat…
Cybersecurity researchers have disclosed details of an unpatched issue that could be exploited to disclose a user's NTLMv2 hash to the attacker.Like in the cas…
A critical security vulnerability has been disclosed in Gogs, a popular open-source self-hosted Git service, that allows an authenticated user to execute arbit…
Cron has existed in Unix and Linux environments for decades, handling backups, cleanup scripts, patching jobs, log rotation, monitoring tasks, and other mainte…
