Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The tee.fail attack targets how Linux handles trusted execution environments. Think of it as a way to peek inside hardware-backed enclaves that should be locke…
A European embassy located in the Indian capital of New Delhi, as well as multiple organizations in Sri Lanka, Pakistan, and Bangladesh, have emerged as the ta…
Microsoft on Thursday released out-of-band security updates to patch a critical-severity Windows Server Update Service (WSUS) vulnerability with a proof-of-con…
A malicious network of YouTube accounts has been observed publishing and promoting videos that lead to malware downloads, essentially abusing the popularity an…
A path traversal flaw in the Rust async-tar library has people looking harder at archive extraction security on Linux. Researchers are calling it TARmageddon, …
MGASA-2025-0246 - Updated firefox, nss & rootcerts fix security vulnerabilities
Cyber threats move faster than teams can track them. Exploits surface, get patched, and come back wearing new code. Staying secure now means reading the landsc…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical security flaw impacting Motex Lanscope Endpoint Manager to its K…
gi-docgen 2025.5 - 2025-10-11 This is a security fix for CVE-2025-11687. u201cThe severity of this issue depends on what else is hosted on the same domain as t…
gi-docgen 2025.5 - 2025-10-11 This is a security fix for CVE-2025-11687. u201cThe severity of this issue depends on what else is hosted on the same domain as t…
Update to 3.6.5 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.5
It starts as an innocuous bug. A developer miscalculates an offset, a boundary check is missing, a buffer is too small''just a simple oversight in code. But in…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, memory disclosu…
A new Unity runtime vulnerability has surfaced, and Linux users are the ones left exposed. The flaw allows untrusted files to execute code inside affected appl…
Cybersecurity researchers have shed light on a previously undocumented threat actor called TA585 that has been observed delivering an off-the-shelf malware cal…
WordPress 6.8.3 Release Security updates included in this release: A data exposure issue where authenticated users could access some restricted content. Indepe…
It was discovered that there were two vulnerabilities in Django, a popular web development framework: * CVE-2025-59681: Fix a potential SQL injection in
Three prominent ransomware groups DragonForce, LockBit, and Qilin have announced a new strategic ransomware alliance, once underscoring continued shifts in the…
Google's DeepMind division on Monday announced an artificial intelligence (AI)-powered agent called CodeMender that automatically detects, patches, and rewrite…
Three new OpenSSL flaws, CVE-2025-9230, 9231, and 9232, were patched upstream this week. They aren't another Heartbleed, but they still matter. Each one can op…
In the era of rapidly advancing artificial intelligence (AI) and cloud technologies, organizations are increasingly implementing security measures to protect s…
Passwork is positioned as an on-premises unified platform for both password and secrets management, aiming to address the increasing complexity of credential s…
A threat actor that's known to share overlaps with a hacking group called YoroTrooper has been observed targeting the Russian public sector with malware famili…
CVE-2025-7493: host to admin escalation prevention: https://www.freeipa.org/release-notes/4-12-5.html Update FreeIPA to latest fixes from ipa-4-12 branch
