Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
New jupyterlab and notebook
rpki-client 9.5 rpki-client now includes arin.tal which is no longer legally encumbered. See https://www.arin.net/announcements/20250116-tal/ rpki-client repor…
The latest round of x86 fixes was recently implemented in Linux 6.15-rc2 as several critical patches to increase mitigation against the Spectre Return Stack Bu…
With recent updates, Microsoft took another step towards thwarting network threats with Defender. As announced,…Microsoft Defender For Endpoint Now Isolates Un…
deadlock potential with VT-d and legacy PCI device pass-through [XSA-467, CVE-2025-1713]
Multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of service or pot…
Open Source Security Foundation (OpenSSF) recently unveiled its Security Baseline initiative to assist Linux security admins and developers in incorporating es…
Organizations are either already adopting GenAI solutions, evaluating strategies for integrating these tools into their business plans, or both. To drive infor…
A heap-based buffer overflow flaw in the decoding functions of openh264, a codec library which supports H.264 encoding and decoding, may allow a remote attacke…
A buffer overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a denial of service (DoS) on the FT…
According to a recently issued advisory from the X.Org Foundation, eight critical security vulnerabilities affecting both X.Org Server and XWayland were disclo…
A command injection flaw was found which could allow a remote, unauthenticated attacker to execute arbitrary shell commands by tricking users into visiting a s…
The first quarter of 2025 has been a battlefield in the world of cybersecurity. Cybercriminals continued launching aggressive new campaigns and refining their …
Cybersecurity researchers are calling attention to an ongoing campaign that's targeting gamers and cryptocurrency investors under the guise of open-source proj…
Various industrial organizations in the Asia-Pacific (APAC) region have been targeted as part of phishing attacks designed to deliver a known malware called Fa…
Linux ransomware is on the rise , and an attack on your system could result in the loss of critical data and significant downtime - if important files have not…
Linux ransomware is on the rise , and an attack on your system could result in the loss of critical data and significant downtime - if important files have not…
Cybersecurity researchers are warning of a new campaign that leverages cracked versions of software as a lure to distribute information stealers like Lumma and…
MIT krb5 a popular implementation of Kerberos 5 protocol was affected by a vulnerability. An authenticated attacker can cause kadmind to write beyond
djoser is a REST implementation of Django authentication system. It has a very low install count according to popularity contest so you most likely don't have …
Linus Torvalds' decision to incorporate the Rust programming language into the Linux kernel has spurred great interest and controversy among the Linux communit…
Microsoft has released security updates to address two Critical-rated flaws impacting Bing and Power Pages, including one that has come under active exploitati…
Multiple vulnerabilities have been found in OpenSSH, the worst of which could allow a remote attacker to gain unauthorized access.
Cybersecurity researchers are alerting to a new campaign that leverages web injects to deliver a new Apple macOS malware known as FrigidStealer.The activity ha…
