Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update lru crate to version 0.18.4 and add a compat package for version 0.16. This fixes an obscure potential use-after-free issue: https://rustsec.org/advisor…
Dancer2 générates sessions id from low-entropy sources if Crypt::URandom and Math::Random::ISAAC::XS are not present. With this update, they are always there.
Update lru crate to version 0.18.4 and add a compat package for version 0.16. This fixes an obscure potential use-after-free issue: https://rustsec.org/advisor…
Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing by silently dropping …
On September 10, 2026, Wiz Research reported that multiple attackers had chained two Artifactory vulnerabilities against self-hosted repositories. One flaw gav…
Urwid could be made to crash or run programs as your login by other local users.
Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes: https://github.com/hickory-dns/hi…
Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes: https://github.com/hickory-dns/hi…
Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes: https://github.com/hickory-dns/hi…
Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes: https://github.com/hickory-dns/hi…
Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes: https://github.com/hickory-dns/hi…
Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes: https://github.com/hickory-dns/hi…
Multiple vulnerabilities were discovered in nginx, a high-performance web and reverse proxy server, which may result in denial of service, memory disclosure or…
Fixes lots of CVEs: see the fixes section for details
Several vulnerabilities were discovered in libevent, an asynchronous event notification library. The HTTP implementation (evhttp) handled Transfer-Encoding and…
Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewa…
Adobe has released an emergency fix for a Magento vulnerability that attackers are already using against online stores. Someone exploiting the flaw can make an…
Suppose an application setting has changed on a Linux server, but nobody remembers changing it. The application still works, and the usual health checks show n…
Chrome release notes can be a blur of version numbers. This one deserves a closer look. In the Linux build published on September 3, 2026, Google fixed CVE-202…
Turning off email images should at least stop the pictures. This week, attackers had a workaround: a scannable QR code built out of text. It still appears, eve…
If managing security across multiple cloud providers wasn't hard enough, each one fails in a different way. For the 2026 Cloud Security Index, Intruder analyze…
Plex is urging users to update their instances to the latest version following the release of an update that patches multiple security flaws.The fixes are avai…
A kernel crash tells defenders that something went wrong. It does not show whether an attacker can turn that failure into a useful capability, combine several …
A patched Linux server can still fail a penetration test because patch status cannot show whether an attack path remains open.
