Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
MetaMask on Thursday said it's responding to what it described as an "ongoing security incident" impacting part of its infrastructure."We are actively addressi…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to its Known Exploited Vulnera…
Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into it and read or change files anywhere e…
Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle, Hacking Cat, and Toy Ghouls, according to multiple re…
Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN.Elastic Secur…
Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a communica…
The urwid web display backend generates web session identifiers by concatenating two random.randrange(10**9) calls that use Python's Mersenne Twister PRNG, whi…
Listing network routes should tell administrators where traffic will go. An IPv6 security report instead shows Linux accessing a freed record used to keep trac…
Rocky Linux 9 released an important security update for python3.12 addressing a vulnerability that allows directory bypass during tarfile extraction, with a CV…
An important security update for python3.14 on Rocky Linux 10 addresses a critical vulnerability allowing directory bypass in tarfile extraction, with detailed…
Cybersecurity researchers have found that several websites are still actively distributing a malware family known as Weedhack to gamers by masquerading as Mine…
A security update for rsync addresses 33 vulnerabilities, enhancing system protection against risks such as directory escape, command injection, and privilege …
A security update for podman addresses two vulnerabilities affecting openSUSE Leap 15.3 and SUSE Enterprise Storage 7.1, enabling prevention of directory manip…
A new Android threat codenamed Manic has been observed actively targeting Ukrainian banks, government and identity services, and messaging applications, as wel…
Rocky Linux 8 has an important security update for python3 due to a CVE vulnerability allowing directory access bypass, impacting the security of the Python ru…
Fedora has released an update for Python 3.14.7, addressing vulnerabilities including DoS in the HTML parser and directory bypass in tarfile extraction, enhanc…
A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to victim organizations and claims to delete stolen data from …
A critical security update for rsync addresses 34 vulnerabilities, including command injection and directory traversal issues, affecting multiple SUSE Linux pr…
A critical security update for the 389 Directory Server on Rocky Linux 8 addresses multiple vulnerabilities, including LDAP filter injection and a buffer overf…
A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to ach…
Linux security problems rarely stay in one place. An authentication issue can lead to unexpected privilege. A container problem can reach the host. Missing log…
Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced pers…
A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts.The vulnerability, tracked as CVE-2026-58231, …
A security update for python3.9 on Rocky Linux 9 addresses a critical vulnerability, allowing directory escape during tarfile extraction, rated with a CVSS sco…
