The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
N-able said it has taken N-central Hosted Environments offline and is urging on-premises customers to shut down their servers until further notice following th…
This release fixes CVE-2026-111253 (dnf5daemon-server: missing session-owner check allows foreign D-Bus callers to replace another client's resolved transactio…
Security Fixes: CVE-2026-94300 Fix remote termination of named under concurrent GSS-TSIG traffic (rhbz#2558420) CVE-2026-97313 Fix a bug when resuming from a q…
The U.S arm of international hearing aid company Amplifon has been notifying customers about a data breach early this year that included medical information.
France has linked October cyberattacks that disrupted refrigeration systems at more than 700 supermarkets and other retail locations to Iranian state-backed ha…
Attackers used the Ethersphere project's own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage network: …
AI agents are taking over routine governance, risk, and compliance tasks, forcing GRC professionals to rethink the skills needed to stay relevant. Anecdotes ex…
Pro-Russian hackers published the personal information of Italian Foreign Minister Antonio Tajani and other senior European officials on the dark web, offering…
The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's acc…
A single attacker using AI agents pulled emergency dispatch records covering seven Taipei districts, researchers at Acronis's Threat Research Unit said last we…
BeakSec discovered that Telegram Desktop, a fast and secure messaging application, contains an IPC record-separator injection vulnerability. It allows a remote…
U.S. government agencies have warned that threat actors are actively targeting industrial refrigeration and cold-chain monitoring systems globally with an aim …
Several vulnerabilities were discovered in rsync, a fast, versatile, remote (and local) file-copying tool, which could result in local privilege escalation, by…
The 3.5.2 version included a regression that can cause "Operation not supported" errors when preserving permissions. New version 3.5.2, includes the fix for CV…
Security Fixes: CVE-2026-94300 Fix remote termination of named under concurrent GSS-TSIG traffic (rhbz#2558420) CVE-2026-97313 Fix a bug when resuming from a q…
The 3.5.2 version included a regression that can cause "Operation not supported" errors when preserving permissions. New version 3.5.2, includes the fix for CV…
Update pcre2 to 10.49, fixing security issues (CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161, CVE-2026-89162, …
A buffer overflow was discovered in the handling of dBASE database files in LibreOffice, which could potentially result in the execution of arbitrary code. For…
cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE) standard. A remote attacker who can submit a JSON Web Encryption token to…
Zack Whittaker reports: Security researchers have discovered hundreds of copies of a Chinese-made AI hacking tool publicly exposed to the internet for anyone t…
Shmulik Cohen and Matan Giladi write: Apiiro research found 2,539 real secrets in 1,994 public GitHub repositories: database passwords, cloud keys, API tokens,…
Several vulnerabilities were discovered in the zlib compression library, which could result in denial of service or potentially the execution of arbitrary code…
WordPress 6.9.11 Security Release Security updates included in this release A weakness in the WordPress upgrade process which can lead to remote code execution…
New versions of packages in Jupyter stack including Jupyterlab and Notebook.