Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
ca-certificates-java would not properly update the JKS keystore.
An iOS sandbox escape published on GitHub lets an app read other apps' files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login …
ca-certificates would not properly update the JKS keystore.
Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly by changing passwords, …
Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization's SD-WAN ne…
eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came fiv…
Unknown threat actors breached TeamUpdraft's website and potentially gained unauthorized access to customers' connection keys for UpdraftCentral, UpdraftVault,…
A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection…
A vulnerability was discovered in the handling of delegated authentication in Keystone, the OpenStack identity service, which may result in information disclos…
A vulnerability was discovered in the handling of delegated authentication in Keystone, the OpenStack identity service, which may result in information disclos…
Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coord…
Apache’s release notice on Oct 3, 2026 lists six Apache Directory LDAP API vulnerabilities.
Apache detailed two Apache APISIX vulnerabilities in notices issued on October 1, 2026.
Several security issues were fixed in OpenStack Keystone.
Moderate: libkcapi security update
Debian released an advisory for vulnerabilities in Neutron, the OpenStack virtual network service, urging users to upgrade to version 2:26.0.3-0+deb13u3 for be…
Fedora released domoticz version 2026.3, an open-source home automation system, emphasizing essential security fixes for the web server and API, making the upg…
SUSE released a moderate security update for hawk-apiserver addressing a vulnerability and including two fixes, applicable to SUSE Linux Enterprise Server 16.0…
openSUSE Tumbleweed has released an update for kubernetes1.36-apiserver-1.36.3-1.1 that addresses a moderate security vulnerability, identified as CVE-2020-856…
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys.A Shodan harveste…
ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office.New research shows the malicious commands behind its fake "…
The recent Keystone advisory is unusual because the vulnerabilities are scattered across several features but keep affecting the same class of security control…
Several security issues were fixed in OpenStack Keystone.
The first week of April 2026 marked a significant escalation in supply chain tactics. A coordinated campaign involving 36 malicious npm packages, disguised as …
