Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A cybercrime group is enslaving Linux servers running vulnerable Webmin apps into a new botnet that security researchers are currently tracking under the name …
A maximum-severity security flaw impacting Siemens SIMATIC IoT2050 Advanced devices has come under active exploitation, VulnCheck has revealed. The vulnerabili…
Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only t…
ESET researchers identified 11 old and forgotten Linux UEFI shim bootloaders at versions 0.9 and below that can be used to bypass UEFI Secure Boot on any UEFI-…
Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program that starts up hardware as varied as home routers, smart ca…
BeyondTrust has released updates to address a critical security flaw impacting Remote Support (RS) and Privileged Remote Access (PRA) products that, if success…
The recently releasedDebian 12.10 "Bookworm" offers us Linux security admins many updates and improvements we can incorporate into our systems. This version pr…
A significant security vulnerability, CVE-2024-7344 , has recently been identified , posing a serious risk to Linux systems that leverage UEFI Secure Boot. Thi…
The threat actors behind the AndroxGh0st malware are now exploiting a broader set of security flaws impacting various internet-facing applications, while also …
A critical vulnerability in the Shim program , which is used in Linux distributions that support secure boot. The bug, CVE-2023-40547 , allows an attacker to e…
Backport a fix for [CVE-2022-48468](https://cve.mitre.org/cgi- bin/cvename.cgi?name=CVE-2022-48468) for [protobuf-c](https://github.com/protobuf-c/protobuf-c),…
Backport a fix for [CVE-2022-48468](https://cve.mitre.org/cgi- bin/cvename.cgi?name=CVE-2022-48468) for [protobuf-c](https://github.com/protobuf-c/protobuf-c),…
Researchers claim to have found a serious security vulnerability affecting Google’s VirusTotal platform that could…Researchers Claim RCE Vulnerability Could Af…
Security researcher and Linux kernel contributor Alexander Popov has proposed a new kernel option called "pkill_on_warn" that would kill all threads in a proce…
Researchers have found numerous security bugs in the Bluetooth stack implemented on SoCs from numerous…BrakTooth Vulnerabilities Riddle Bluetooth Devices From …
Billions of smartphones, tablets, laptops, and Linux-based IoT devices are now using Bluetooth software stacks that are potentially susceptible a new security …
A serious security flaw existed in the Bitdefender Total Security 2020 software. As discovered by the researcher, this vulnerability couldSerious Remote Code E…
Internet-of things is seemly always vulnerable to security flaws. From individual users to the corporate sector, these IoT flaws haveResearcher Finds Vulnerabi…
Remember the critical remote code execution (RCE) vulnerability in the Exim email server, CVE-2019-15846,from mid-September? Barely two weeks later, and the so…
Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute…
A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published t…
A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a m…
A vulnerability was discovered in Brotli, a generic-purpose lossless compression suite, which could result in denial of service, or potentially the execution o…
Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the B…
