Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, charging 14 individuals, and seizin…
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco …
Imagine releasing a software solution into the market only to realize the user cannot use the app properly. They have been reporting numerous bugs, which has l…
The U.S. Department of Justice (DoJ) on Tuesday charged 14 people and seized about 187 computers as part of its ongoing efforts to disrupt North Korea's fraudu…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape,…
Customers of Russian travel website Anywayanyday were unable to book tickets or hotel rooms as the company responded to a cyberattack.
The Joint Economic Committee on Tuesday released the results of a year-long investigation into Tinder, Hinge, Match, Plenty of Fish and several other dating si…
Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structured drill shows security teams exactly wh…
It was discovered that the cURL URL transfer library, is prone to a use-after-free vulnerability when handling a HTTP/2 RST_STREAM received by a server during …
Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under…
A Saudi National and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San…
fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519352)
fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519351)
fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519352)
fix CVE-2026-19582: a potential buffer overflow in rsrc_resource_name (rhbz#2519351)
Users who can read logs or create Kubernetes resources could obtain Google Cloud credentials they are not allowed to read directly, according to two new report…
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through sp…
More than 40 residences in Texas were the target of a federal operation in September to clamp down on remote worker scams that feed money back to the North Kor…
Luis Monzon reports: Ampath Laboratories, one of South Africa’s largest pathology service providers, has been hit by a cyberattack, with the attacker claiming …
Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway.…
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal …
Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, and Windows systems that still rely on passwords alone. Speco…
Patch to fix CVE-2026-79079. Ensure that basic functionality works (installation of modules, browsing through modules, searching), and ensure that the PoC at h…
Fix Negotiate ambient user conn reuse (CVE-2026-19931)
