Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A third Yandex data center in Russia was hit by Ukrainian drones over the weekend, forcing it to shut down and causing further disruptions to cloud services, p…
A file on a build machine could end up in a cloud deployment bundle because of a flaw disclosed by Amazon Web Services (AWS) on Oct 8, 2026.
The Asahi Shimbun reports: IDC Frontier Inc., a SoftBank subsidiary that provides cloud services, said Oct. 7 that a ransomware attack caused a system outage a…
The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised …
The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for d…
Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans…
CERT-UA found fake Cloudflare verification pages that led visitors into a now-familiar ClickFix trap. This time the goal was to infect machines with an infoste…
Featuring:Cybersecurity is being reshaped by the expansion of cloud infrastructure, AI, distributed systems, and increasingly complex digital environments. As …
The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-a…
N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication f…
Linux kernel vulnerability news dominated the security updates published from August 20 through August 27. Ubuntu, Debian, Fedora, Mageia, Oracle Linux, Rocky …
This week’s Linux security updates affect cloud hosts, public servers, and services used across entire networks. Ubuntu, Debian, and Rocky Linux released impor…
Entra ID researcher Dirk-jan Mollema demonstrated that malware already running in a signed-in Windows session can silently use the victim's Windows Hello for B…
An update for the kernel in Rocky Linux SIG Cloud 9 includes security fixes for vulnerabilities CVE-2026-23415 and CVE-2026-43450, along with various bug fixes…
A moderate kernel update for Rocky Linux SIG Cloud 9 addresses security vulnerabilities and bugs, improving performance and fixing issues related to network in…
A security update for the Rocky Linux SIG Cloud 8 kernel addresses privilege escalation vulnerabilities, along with several bug fixes and enhancements affectin…
A significant kernel update for Rocky Linux SIG Cloud 8 addresses security vulnerabilities, specifically CVE-2025-54518, alongside bug fixes and enhancements, …
Linux runs cloud platforms, containerized applications, and business-critical servers. It is the engine that powers much of today’s business infrastructure. St…
An update for Rocky Linux SIG Cloud 8 addresses a kernel security flaw and includes bug fixes and enhancements, specifically targeting CVE-2026-52923 and KVM a…
An update has been released for the Rocky Linux SIG Cloud 9 kernel, addressing a Denial of Service vulnerability and various bug fixes and enhancements.
Malware running as an ordinary user on a Windows machine can sign into a victim's passkey-protected accounts without a fingerprint, a PIN, or anything at all a…
An important kernel update for Rocky Linux SIG Cloud 9 addresses multiple security vulnerabilities and includes bug fixes and enhancements, improving system pe…
There are several reasons why Linux has such a good reputation and has become such a good standard across the world. It is the power behind most internet serve…
Cisco Talos has detailed msaRAT, a Rust-based RAT used by the Chaos ransomware crew that drives a headless Chrome or Edge session over CDP to smuggle C2 traffi…
