Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update the object crate to version 0.40.0. Add a compat package for version 0.39 of the object crate. Update the ruzstd crate to version 0.9.1. This update als…
Update the object crate to version 0.40.0. Add a compat package for version 0.39 of the object crate. Update the ruzstd crate to version 0.9.1. This update als…
Update the object crate to version 0.40.0. Add a compat package for version 0.39 of the object crate. Update the ruzstd crate to version 0.9.1. This update als…
A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection…
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on Oc…
Go 1.27.3 and Go 1.26.10, released on October 20, make Go's certificate verifier reject any certificate chain that passes through one of eight intermediate cer…
ConnectWise on Monday said it has taken remediation measures, including strengthening administrative-access protections and resetting accounts and replacing ap…
Two vulnerabilities were discovered in Django, the popular Python web-development framework. CVE-2026-77050 Potential denial-of-service vulnerability in get_su…
Security updates using git snapshot Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.…
Security updates using git snapshot Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.…
Attackers broke into BeyondTrust Remote Support before a patch was ready, then left ways to return to the server.
WhatsApp argued that NSO Group violated a 2025 injunction against using the messaging app to spread spyware. A federal judge said WhatsApp hurt its case by not…
Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with conf…
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security brea…
Ahold Delhaize, the Dutch multinational grocery retailer, said Monday that a cyberattack forced it to take systems offline across most of its U.S. and European…
Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:…
The disruptions began Sunday, when users complained of difficulties loading news feeds, playing music and accessing other features of VK's platforms.
Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulne…
Update to version 0.10.1. This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in ru…
Update to version 3.15.2. Release notes since 3.13.3: https://aomedia.googlesource.com/aom/+/refs/tags/v3.14.0 https://aomedia.googlesource.com/aom/+/refs/tags…
Update to version 0.10.1. This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in ru…
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers…
Update libheif to 1.23.6 Yet another security and bugfix release, see https://github.com/strukturag/libheif/releases/tag/v1.23.6
Update libheif to 1.23.6 Yet another security and bugfix release, see https://github.com/strukturag/libheif/releases/tag/v1.23.6
