Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Two flaws in the Xen hypervisor allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on the same host, including dom0. Dom0 i…
A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin. The fla…
Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly by changing passwords, …
An attacker broke into the update system of the cPGuard security tool on November 2 and used it to send a malicious script to customers' Linux servers. The scr…
A vulnerabilitiy was discovered in git-annex, a tool to manage large files with git, without storing the file contents in git, which could result in data exfil…
Apple does not attribute attacks or the notices to specific malicious actors or geographical regions, the notification said, due to the “extreme cost, sophisti…
Taiwanese network-attached storage (NAS) appliance maker Synology warned customers to update their devices immediately due to a surge in C3RB3r ransomware atta…
Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script refere…
A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network, a cus…
Nationwide lab test company Quest Diagnostics said one of its key systems may have experienced a breach of patient data.
The update for cifs-utils announced in DSA 6567-1 introduced a regression when using the sec=krb5 and cruid mount options. Updated packages are now available t…
WordPress 6.9.10 Security Release Security updates included in this release A stored XSS on the Comments administration page, exploitable via pending comments,…
An update that solves 229 vulnerabilities, contains one feature and has five security fixes can now be installed.
An update that contains one feature can now be installed.
An update that solves 110 vulnerabilities, contains 10 features and has seven security fixes can now be installed.
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal…
An update that solves 110 vulnerabilities, contains 10 features and has seven security fixes can now be installed.
An update that solves 124 vulnerabilities, contains three features and has seven security fixes can now be installed.
The 7.2.10 stable kernel updates contain a number of important fixes across the tree.
Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script refere…
The 7.2.10 stable kernel updates contain a number of important fixes across the tree.
Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script refere…
An update that solves 34 vulnerabilities and contains one feature can now be installed.
An update that solves 34 vulnerabilities and contains one feature can now be installed.
