Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Researchers published a new Linux intrusion-detection architecture on Monday that handles network-flow analysis using XDP and eBPF. By shifting the workload cl…
A security update is available for gstreamer1-plugins-bad-free in Rocky Linux 10, addressing a critical heap out-of-bounds vulnerability that could potentially…
Ubuntu released a security notice for version 16.04 LTS addressing multiple Linux kernel vulnerabilities that could allow attackers to compromise systems, with…
Ubuntu 26.04 LTS received an important security update for the linux-oem-7.0 kernel, addressing multiple vulnerabilities that could compromise the system. User…
Ubuntu released security updates for libgit2 addressing multiple vulnerabilities that could allow remote code execution, denial of service, and credential leak…
Ubuntu 24.04 LTS received a security update fixing multiple Linux kernel vulnerabilities that could allow system compromise, necessitating a reboot and possibl…
Ubuntu released security updates for Linux kernels addressing multiple vulnerabilities that could compromise systems, urging users to update and reboot their d…
Ubuntu 26.04 LTS has addressed multiple Linux kernel vulnerabilities that could allow system compromise. Users must update and reboot their systems, recompilin…
Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attacks targeting critical infrastructure sectors and organiza…
Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attacks targeting critical infrastructure sectors and organiza…
Fedora 43 has released an update for Suricata (version 7.0.17), an intrusion detection system featuring multi-threading and automatic protocol detection, addre…
Microsoft has disclosed that Storm-1175, a financially motivated threat actor linked to China, has deployed a previously undocumented ransomware strain called …
Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities. Ninete…
A federal judge in Alexandria, Virginia, sentenced Maksim Silnikau to 16 years in prison on August 5 for creating and running Ransom Cartel, the ransomware-as-…
Debian has addressed multiple vulnerabilities in the Linux kernel, potentially leading to privilege escalation, denial of service, or information leaks, urging…
The Fedora update for perl-Mojolicious version 9.48 addresses a security flaw related to CSRF tokens, enhancing protection against BREACH attacks by masking to…
An AI-driven threat actor called JADEPUFFER built ransomware that hunts AI model files specifically, entering through a known Langflow RCE and pivoting via an …
Fedora has released an update for Netatalk version 4.5.1, introducing security fixes and improvements to the Apple Filing Protocol file server software and its…
Multiple vulnerabilities in WebKitGTK have been identified, leading to process crashes, memory corruption, and potential data leaks; users are urged to upgrade…
The Chaos ransomware group ran its command-and-control through the victim's own browser. Cisco Talos on Thursday detailed msaRAT, the Rust implant behind it, f…
A lot of this week’s trouble starts with something that looks close enough.A familiar repo. A useful installer. A harmless sync setting. Then the handoff goes …
The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) has designated two individuals and a VPN service provider for enabling ransomware actors…
Somewhere right now, a security tool is quietly finding bugs faster than any human can fix them. That's supposed to be the good news. The catch is that the att…
Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is how it is built: not one tool but three older destructive progr…
