Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Cybersecurity researchers have flagged a new version of PamStealer that ensures that the main payload can only be recovered using a server-side decryption chai…
Automatic update for cockpit-368-1.fc45. Changelog for cockpit * Wed Sep 23 2026 Packit - 368-1 - Limit concurrent connections CVE-2026-91149 - Harden cockpit-…
The "third-party[.]com" domain, commonly used as a documentation placeholder, has been observed serving a ClickFix lure to Windows browsers while displaying a …
An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on September…
Multiple vulnerabilities has been found in libevent, an event notification library. CVE-2026-63379 (GHSA-2gmv-p5m7-98p6) Sebastianosrt discovered that libevent…
As of September 17, Red Hat had documented a flaw in a Red Hat Quay build workflow that could expose container registry credentials to code retrieved from a mu…
eBPF lets verified programs run inside the Linux kernel. Linux eBPF security depends on supporting data remaining available for as long as those programs can u…
Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say Iran's intelligence service …
Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a communica…
Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workf…
A proposed Linux repair addresses two timer bugs that can trigger use-after-free conditions while one program replaces itself with another through exec(). Both…
Plex is urging users to update their instances to the latest version following the release of an update that patches multiple security flaws.The fixes are avai…
The Linux IPMI maintainer accepted a patch on Aug 26, 2026 that restores an RCU grace period before command-receiver objects are freed. The one-line change add…
An important security update for python3.14 on Rocky Linux 10 addresses a critical vulnerability allowing directory bypass in tarfile extraction, with detailed…
SUSE announced an important security update for cosign, affecting various SUSE and openSUSE products, aimed at addressing vulnerabilities by rebuilding against…
SUSE has released a critical security update for Podman, rebuilding it against the latest Go security release for several affected products, with detailed inst…
An update for python313-pytest-html-4.2.0-5.1 on openSUSE Tumbleweed addresses a vulnerability, improving system security with details available in the corresp…
Linux security monitoring is useful only when it helps a team explain what happened. Collecting more events does not automatically provide better visibility, e…
Oracle Linux 10 has released updates for the yggdrasil package, fixing CVE-2026-33810 and rebuilding it against an updated golang. New RPMs are available for x…
Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Wor…
A sustainable Linux security program depends on more than individual hardening settings, scanners, and monitoring tools. Those controls matter, but they only r…
A moderate security update for glib2 on Rocky Linux 9 addresses multiple vulnerabilities, including buffer over-reads and out-of-bounds reads, with detailed in…
A security update for BIND on Rocky Linux 10 addresses multiple vulnerabilities, including cache poisoning and DNSSEC issues, with detailed severity ratings av…
Linux security problems rarely stay in one place. An authentication issue can lead to unexpected privilege. A container problem can reach the host. Missing log…
