Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Cybersecurity researchers are calling attention to a series of cyber attacks targeting financial organizations across Africa since at least July 2023 using a m…
Here's the kind of change that gets sysadmins and devs talking''and not always in agreement. Ubuntu is introducing a configuration tweak that disables Spectre-…
Here's the kind of change that gets sysadmins and devs talking''and not always in agreement. Ubuntu is introducing a configuration tweak that disables Spectre-…
New research has uncovered continued risk from a known security weakness in Microsoft's Entra ID, potentially enabling malicious actors to achieve account take…
CVE-2025-5283: A double-free could have occurred in vpx_codec_enc_init_multi after a failed allocation when initializing the encoder for WebRTC. This could hav…
Potential log injection via unescaped request path. (CVE-2025-48432) References: - https://bugs.mageia.org/show_bug.cgi?id=34348 - https://www.openwall.com/lis…
Fixed a possible buffer overflow write bug in the PDF file parser that could cause a denial-of-service (DoS) condition or enable remote code execution. (CVE-20…
When you're architecting a secure Linux environment, understanding where your operating system stands''both in terms of hardware compatibility and security fea…
The April 2025 cyber attacks targeting U.K. retailers Marks & Spencer and Co-op have been classified as a "single combined cyber event."That's according to an …
Roundcube Webmail could allow remote code execution.
Linux powers over 80% of cloud infrastructure , making it an attractive target for cybercriminals. Your Linux server's security matters more than ever, as data…
Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags() Fixes CVE-2025-48432: Potential log injection via unescaped request path
Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags() Fixes CVE-2025-48432: Potential log injection via unescaped request path
Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags() Fixes CVE-2025-48432: Potential log injection via unescaped request path
Cybersecurity researchers have exposed a previously unknown threat actor known as Water Curse that relies on weaponized GitHub repositories to deliver multi-st…
Cybersecurity researchers have exposed a previously unknown threat actor known as Water Curse that relies on weaponized GitHub repositories to deliver multi-st…
Iran has throttled internet access in the country in a purported attempt to hamper Israel's ability to conduct covert cyber operations, days after the latter l…
Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags() Fixes CVE-2025-48432: Potential log injection via unescaped request path
Enterprise environments power everything from development machines and servers to kiosks and IoT devices. However, managing these endpoints, especially across …
Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) repository that's capable of harvesting sensitive developer-re…
Cybersecurity researchers from SafeDep and Veracode detailed a number of malware-laced npm packages that are designed to execute remote code and download addit…
An input sanitization flaw in Konsole might allow remote attackers to execute commands via a malicious URL
New version 4.4.7 Ignoring potential error when using udevadm in %post scriptlet
