Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…
Security fix for CVE-2025-0938
Security fix for CVE-2025-0938
Security fix for CVE-2025-0938
Tornado has an HTTP cookie parsing DoS vulnerability. (CVE-2024-52804) References: - https://bugs.mageia.org/show_bug.cgi?id=33816 - https://lists.opensuse.org…
Update to 9.16.33 (#2342784) Security Fixes: DNS-over-HTTPS flooding fixes. (CVE-2024-12705) Limit additional section processing for large RDATA sets. (CVE-202…
Update to 9.16.33 (#2342784) Security Fixes: DNS-over-HTTPS flooding fixes. (CVE-2024-12705) Limit additional section processing for large RDATA sets. (CVE-202…
Multiple security vulnerabilities have been discovered in Cacti, a web interface for graphing of monitoring systems, which could result in cross-site scripting…
Zimbra has released software updates to address critical security flaws in its Collaboration software that, if successfully exploited, could result in informat…
Security fix for CVE-2023-52892, CVE-2024-27354
xrdp allows an infinite number of login attempts. (CVE-2024-39917) References: - https://bugs.mageia.org/show_bug.cgi?id=33985 - https://lists.opensuse.org/arc…
Tails, the amnesic incognito live system renowned for its privacy and security measures, has just released version 6.12 , bringing crucial updates and fixes yo…
Google has shipped patches to address 47 security flaws in its Android operating system, including one it said has come under active exploitation in the wild.T…
With the recent discovery of a significant Chrome vulnerability tagged as CVE-2025-0762 , Google Chrome has again come under fire. This new threat, found in th…
Open-source project security testing focuses on many components, ensuring there are no safety vulnerabilities. These components include physical security, work…
Open-source project security testing focuses on many components, ensuring there are no safety vulnerabilities. These components include physical security, work…
A security vulnerability has been discovered in simgear, a collection of libraries for constructing simulation and visualization applications such as FlightGea…
A critical security flaw has been disclosed in the Cacti open-source network monitoring and fault management framework that could allow an authenticated attack…
fix VW_VERSION in compiled code, patch security issues
Several security vulnerabilities have been discovered in iperf3, an internet protocol bandwidth measuring tool, which may lead to a denial-of-service. When ipe…
Welcome to your weekly cybersecurity scoop! Ever thought about how the same AI meant to protect our hospitals could also compromise them? This week, we’re brea…
This update addresses two security vulnerabilities: * CVE-2025-0395: A buffer overflow may occur in the assert function with certain large program names and as…
