Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
containerd is a container runtime. A bug was found in containerd where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed…
The U.S. Department of Justice (DoJ) on Thursday announced charges against a 36-year-old Yemeni national for allegedly deploying the Black Kingdom ransomware a…
Update to 128.10.0 https://www.thunderbird.net/en-US/thunderbird/128.10.0esr/releasenotes/
The release of Tails 6.15 is more than just a routine update''it's a decisive step forward in strengthening secure, anonymous computing for privacy-conscious u…
Run by the team at workflow orchestration and AI platform Tines, the Tines library features pre-built workflows shared by security practitioners from across th…
Update to 128.10.0 https://www.thunderbird.net/en-US/thunderbird/128.10.0esr/releasenotes/
The explosive growth of Software-as-a-Service (SaaS) applications in recent years has ushered in new conveniences''and new risks. For us Linux security admins,…
The following vulnerability has been discovered in the gorilla/csrf package for Go: Prior to 1.7.3, gorilla/csrf did not validate the Origin header against an …
Russian companies have been targeted as part of a large-scale phishing campaign that's designed to deliver a known malware called DarkWatchman.Targets of the a…
The fix for CVE-2025-27516 announced in DLA-4126 does not supporting Python 2. Now, the support of Python 2 was re-instated. For Debian 11 bullseye, this probl…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or a bypass of s…
Admins managing Linux systems know firsthand that security isn't just about firewalls, encryption, and monitoring tools. Often, it's the more minor, seemingly …
A flaw was discovered in the implementation of the assert() function in the GNU C Library, the C standard library implementation used by Debian. When the asser…
update internal Libraw to 2025/03/17 snapshot
update internal Libraw to 2025/03/17 snapshot
Let's be real''online privacy isn't optional anymore. Attacks are up, tracking is baked into everything, and if you're not locking things down, you're exposed.…
Cybersecurity researchers have detailed the activities of an initial access broker (IAB) dubbed ToyMaker that has been observed handing over access to double e…
Vishing, or voice phishing, is when attackers use a phone call''not malware or email''to pull off a scam. They pretend to be someone trustworthy: tech support,…
Multiple threat activity clusters with ties to North Korea (aka Democratic People's Republic of Korea or DPRK) have been linked to attacks targeting organizati…
Cybersecurity researchers have detailed a malware campaign that's targeting Docker environments with a previously undocumented technique to mine cryptocurrency…
rpki-client 9.5 rpki-client now includes arin.tal which is no longer legally encumbered. See https://www.arin.net/announcements/20250116-tal/ rpki-client repor…
New jupyterlab and notebook
Cybersecurity researchers have flagged a new malicious campaign related to the North Korean state-sponsored threat actor known as Kimsuky that exploits a now-p…
rpki-client 9.5 rpki-client now includes arin.tal which is no longer legally encumbered. See https://www.arin.net/announcements/20250116-tal/ rpki-client repor…
