The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security vulnerability impacting Microsoft SharePoint Server to its Known…
Ivanti has released security updates to address a critical flaw impacting its Endpoint Manager (EPM) solution that, if successfully exploited, could result in …
Three interrelated high-severity security flaws discovered in Kubernetes could be exploited to achieve remote code execution with elevated privileges on Window…
New findings show that malicious actors could leverage a sneaky malware detection evasion technique and bypass endpoint security solutions by manipulating the …
Ivanti has disclosed yet another security flaw impacting Endpoint Manager Mobile (EPMM), formerly known as MobileIron Core, that it said has been weaponized as…
Several security issues were fixed in pngcheck.
nth-check could be made to crash if it opened a specially crafted file.
Security stakeholders have come to realize that the prominent role the browser has in the modern corporate environment requires a re-evaluation of how it is ma…
Several security issues were fixed in Checkmk.
Phishing attacks keep surfacing online with innovative ways to trick users. The latest phishing campaign…New Phishing Campaign Exploits Proofpoint's Name To St…
Security researchers from Snyk discovered that the fix for CVE-2019-9658 was incomplete. Checkstyle, a development tool to help programmers write Java code tha…
Heads up HP users! Your HP PC may have been exposed to a cybersecurity threat. Researchers have found a seriousLPE Flaw In HP Touchpoint Analytics Threatened N…
Recently, Apple fixed a vulnerability with the release of iOS 12.4.1 that allowed for users to jailbreak their iPhones. TheCheckm8 ' A Permanent iOS Jailbreak …
ConnectWise has taken the precautionary step of disabling five third-party extensions in partner environments following reports of unauthorized access. In an a…
The 3.5.2 version included a regression that can cause "Operation not supported" errors when preserving permissions. New version 3.5.2, includes the fix for CV…
Security GHSA-h664-qxhh-gx3w CVE-2026-109545 GHSA-2q8j-chww-3pcq CVE-ID requested GHSA-5mqr-9575-x89w CVE-ID requested GHSA-rjg6-phr3-3rxw CVE-ID requested
An update that solves one vulnerability can now be installed.
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 mal…
NGINX has patched flaws that could let request data bypass a size limit or allow an encrypted session to be forged.
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memor…
Andrey Misiurov has proposed a patch for a Linux NTFS bug that lets a crafted disk image make the kernel read beyond a memory buffer.
Citrix has confirmed targeted attacks involving a Citrix NetScaler vulnerability and urged affected customers to update.
Update to gstreamer-1.28.7.
An update that solves 91 vulnerabilities and contains one feature can now be installed.