Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
BTCPay Server, a self-hosted, open-source cryptocurrency payment processor, has urged users to install the latest version of its software in response to report…
Version 3.3.11 (September 16, 2026) Changes Added menu items for moving column headers due to broken drag-and-drop in GTK Enabled fixed number of upload slots …
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882…
TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer sessio…
Brotli 1.2.1 update which is security fix for CVE-2026-111497
Attackers are exploiting a flaw in Brotli, Google's software for unpacking compressed data.
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli…
Brotli 1.2.1 update which is security fix for CVE-2026-111497
Brotli 1.2.1 update which is security fix for CVE-2026-111497
A Godot vulnerability could let an attacker hide code in a language file and make a game run it on a player's computer.
The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root …
Brotli could be made to crash or run programs if it received specially crafted input.
A local file disclosure vulnerability was discovered in the XInclude processing component of Inkscape, a vector-based drawing program. A remote attacker can re…
A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data.…
Multiple vulnerabilities were discovered in roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in IMAP command injection, …
Multiple vulnerabilities have been found in PHP, the worst of which could result in remote code execution.
Several security issues were fixed in U-Boot.
Linux researcher Hyunwoo Kim has shown five ways to turn a limited account into root on tested Linux systems.
A flaw in Broadcom's Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any p…
- Fixes: CVE-2026-14612 - potential buffer overflow in ipa-otpd - Fix potential buffer overvlow in ipa-join - Fix potential NUL pointer dereference in ipa-kdb
- Fixes: CVE-2026-14612 - potential buffer overflow in ipa-otpd - Fix potential buffer overvlow in ipa-join - Fix potential NUL pointer dereference in ipa-kdb
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remo…
A vulnerability was discovered in SPIP, a website engine for publishing, which could result in unauthenticated remote code execution. For the stable distributi…
