Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
After scanning through the report of your managed security service provider (MSSP), you are faced with a huge number of blocked connections and hundreds of ana…
We must remember that exposing customer information in a database export left in a public folder, for example, or even worse, in a backup archive with password…
Scott Calvert reports: This historic village, established in 1697, drips with charm. White clapboard houses on Main Street proclaim their vintage—“Built by Joh…
Cybersecurity researchers have disclosed details of a campaign in which an emerging agentic penetration testing platform called AntiFox has been used to steal …
Connor Jones reports: A 2013 breach of Russian-language cybercrime forum YouHack exposed its members’ login details – and millions of credentials they had post…
NL Times reports: More than 350 Dutch sports clubs have reported a data breach to the Dutch Data Protection Authority (AP) following a cyberattack on membershi…
MindCore Technologies writes: A rural hospital cyber incident rarely starts with a locked screen and a ransom note. It usually starts with an outsider moving q…
The in-house Python script behind eMudhra's October key compromise has now cost the company 8 more of its intermediate certificate authorities (CAs), even thou…
Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume…
AI provider keys that customers stored on Railway were stolen in an October breach and used to commit an estimated $740,000 in unauthorized spending, the platf…
Cloud hosting provider Railway says hackers exploited vulnerabilities in its infrastructure to steal customer authentication secrets and generate approximately…
An exploited Outlook vulnerability drew most of the attention in Microsoft's latest Patch Tuesday, which listed 1,093 bugs total.
Jose Antonio Lanz reports: Near AI has disclosed a breach that exposed account information belonging to about 100 users and data from 18 AI agents after an att…
ca-certificates-java would not properly update the JKS keystore.
An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI's inference servers last Sunday. …
French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild. The au…
Fireworks said the incident affected a “limited number of customer accounts” — all of whom were notified of the attack.
Binance is warning about a vulnerability in Apple's iOS 26.7.1, 27.0.1, and 27.2 that could allow third-party apps to read private files stored by other apps, …
Fireworks AI disclosed on Monday that its investigation into a security incident first reported early last month uncovered further malicious activity, affectin…
Tess Ikonomou and Josh Butler report: OpenAI will not face criminal penalties over the Medicare data breach, but the prime minister has flagged changes to Aust…
Eli Motycka reports: A broad announcement to shut down university devices and disconnect from university Wi-Fi went out on Monday morning as malicious software…
Tim Durkin reports: The Children’s Foundation has issued a privacy notice following a data breach involving its IT service provider, Highland Shores Children’s…
Anthropic on Monday released Claude Fable 5.2 and Claude Mythos 5.2 models, which it said exhibit improvements in coding, reasoning, and vision. During pre-rel…
A Linux security protection can appear to be available but still be switched off when a system needs it.
