Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.
In March, Google unveiled the Live Update Orchestrator (LUO), a groundbreaking means of applying live kernel updates to production systems. This isn't just ano…
Enable CSS Overscroll Behavior by default. Change threaded rendering implementation to use Skia API instead of WebCore display list that is not thread safe. Fi…
Microcode updates has been released for Intel(R) processors, addressing multiple potential vulnerabilties that may allow denial of service or information discl…
Mohamed Maatallah discovered a stack-based buffer overflow in the get_name() function in net-tools, a collection of programs for controlling the network subsys…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Enable CSS Overscroll Behavior by default. Change threaded rendering implementation to use Skia API instead of WebCore display list that is not thread safe. Fi…
When privacy stakes are high, tools that strengthen security and anonymity become essential. This is precisely where Oniux '' a new command-line utility from t…
Red Hat Enterprise Linux got hacked during the Pwn2Own Berlin 2025 competition . Let that sink in for a moment. This is one of the go-to systems for businesses…
Ransomware has evolved into a deceptive, highly coordinated and dangerously sophisticated threat capable of crippling organizations of any size. Cybercriminals…
Let's face it: for Linux admins, life revolves around the command line. It's fast, efficient, and puts you firmly in control''until it doesn't. Not everything …
Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) repository that purports to be an application related to the S…
It was discovered that there was a potential buffer overflow vulnerability in libeconf, a configuration file parser. This could have been exploited via malicou…
The Raspberry Pi OS has taken a big step forward with its latest update , built on Debian Bookworm. This isn't just a routine refresh''it's a deliberate shift …
An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.strip_tags() function is vulnerable to a pot…
A vulnerability has been discovered in SimpleSAMLphp, a framework for authentication, primarily via the SAML protocol. CVE-2025-27773
Update to 128.10.0 https://www.thunderbird.net/en-US/thunderbird/128.10.0esr/releasenotes/
Threat actors with ties to the Qilin ransomware family have leveraged malware known as SmokeLoader along with a previously undocumented .NET compiled loader co…
Threat actors with ties to the Qilin ransomware family have leveraged malware known as SmokeLoader along with a previously undocumented .NET compiled loader co…
Threat actors with ties to the Qilin ransomware family have leveraged malware known as SmokeLoader along with a previously undocumented .NET compiled loader co…
Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) repository that masquerades as a seemingly harmless Discord-re…
Update to git snapshot dffb773
What if attackers aren't breaking in—they're already inside, watching, and adapting?This week showed a sharp rise in stealth tactics built for long-term access…
mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data. (CVE-2025-31492) References: - https://bugs.mageia.org/show_bug.cgi?id=34216
