Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
SUSE released a moderate security update for hawk-apiserver addressing a vulnerability and including two fixes, applicable to SUSE Linux Enterprise Server 16.0…
openSUSE Tumbleweed has released an update for kubernetes1.36-apiserver-1.36.3-1.1 that addresses a moderate security vulnerability, identified as CVE-2020-856…
The recent Keystone advisory is unusual because the vulnerabilities are scattered across several features but keep affecting the same class of security control…
Keystone Middleware could allow unintended access to network services.
Grzegorz Grasza discovered a vulnerability in the Openstack middleware to provide authentication and authorization features to web services other than Keystone…
Several security issues were fixed in OpenStack Keystone.
A vulnerability has been discovered in r-cran-gh, a GNU R Minimal client to access the 'GitHub' 'API'. CVE-2025-54956
Cybersecurity researchers have uncovered malicious packages uploaded to the Python Package Index (PyPI) repository that act as checker tools to validate stolen…
Dell customers need to stay cautious as the vendors admit a data breach impacting their…Dell API Exploitation Led to Breach Affecting 49M Customers on Latest H…
Security vulnerabilities uncovered in cloud-based pinyin keyboard apps could be exploited to reveal users' keystrokes to nefarious actors.The findings come fro…
A new security shortcoming discovered in Apple M-series chips could be exploited to extract secret keys used during cryptographic operations.Dubbed GoFetch, th…
The Fedora update for apiguardian addresses system JDK changes, critical CVEs related to V8 type confusion, bug fixes, and integrates updates for lucene and Ja…
GitHub has revealed that it has rotated some keys in response to a security vulnerability that could be potentially exploited to gain access to credentials wit…
Security researchers from Ruhr University Bochum have discovered a vulnerability in the Secure Shell (SSH) cryptographic network protocol that could allow an a…
Cloudflare on Thursday said it mitigated thousands of hyper-volumetric HTTP distributed denial-of-service (DDoS) attacks that exploited a recently disclosed fl…
Amazon Web Services (AWS), Cloudflare, and Google on Tuesday said they took steps to mitigate record-breaking distributed denial-of-service (DDoS) attacks that…
Researchers discovered a reply URL flaw in Azure AD that could allow unauthorized access to…Microsoft Power Platform API Threatened Due To Reply URL Flaw on La…
OpenShift API for Data Protection (OADP) 1.0.11 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Co…
OpenShift API for Data Protection (OADP) 1.1.5 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Com…
OpenShift API for Data Protection (OADP) 1.1.3 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Comm…
OpenShift API for Data Protection (OADP) 1.1.2 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Comm…
Researchers found a few vulnerabilities affecting TPM 2.0, exploiting which could risk device security and…Vulnerabilities In TPM 2.0 Could Expose Cryptographi…
The Trusted Platform Module (TPM) 2.0 specification is affected by two buffer overflow vulnerabilities that could allow attackers to access or overwrite sensit…
Fixed: * A buffer overflow in tss2-rc as CVE-2023-22745. * The drv layer in tss2-rc should have been the policy layer. * Spec deviation in Fapi_GetDescription …
