Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Debian's security advisory DSA-6412-1 addresses multiple vulnerabilities in the botan3 cryptography library, recommending an upgrade to version 3.12.0 to mitig…
Malware running as an ordinary user on a Windows machine can sign into a victim's passkey-protected accounts without a fingerprint, a PIN, or anything at all a…
Fedora 44 has updated the coturn TURN/STUN server to version 4.15.0, addressing various security and reliability issues while enhancing features such as mobili…
Oracle Linux 8 has released updated Dovecot packages to address CVE-2026-42006, which fixes an IMAP parser issue, with RPMs available for x86_64 and aarch64 ar…
Fedora has released Valkey 9.0.5 with security fixes addressing remote code execution vulnerabilities and numerous bug fixes, enhancing performance and stabili…
SUSE has released an important update for valkey addressing two vulnerabilities that allow remote code execution. Systems must be updated using the recommended…
The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inverters to its Covered List on July 28. The move general…
Rocky Linux 9 has released a critical PHP update addressing multiple vulnerabilities, including remote code execution and denial of service, as detailed in the…
Las Vegas, USA, 29th July 2026, CyberNewswireSweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities on Latest Hacking …
A critical security update for Dovecot on Rocky Linux 8 addresses a Denial of Service vulnerability (CVE-2026-42006), impacting the server's operation and requ…
openSUSE released an important security update for jline3, addressing two vulnerabilities related to unauthenticated remote memory exhaustion and DoS attacks, …
Mageia 10 has released updated Xonotic packages to address issues with broken online statistics support, as detailed in the bug report.
Important: dovecot security update
Important: dovecot security update
Several security issues were fixed in libgphoto2.
rlottie could be made to crash if it received specially crafted input.
F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted H…
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys.A Shodan harveste…
Important: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update
North Korean threat actors linked to the Contagious Interview campaign have been observed employing steganography in SVG image files to conceal malicious paylo…
Release notes for xrdp v0.10.6.1 (2026/07/06) General announcements This release fixes 10 vulnerabilities and 1 regression introduced by a vulnerability fix in…
Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of these flaws for local root privilege …
A malware framework called OkoBot has been running on Windows machines since April 2025, and one of its modules is built to con hardware wallet owners out of t…
Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from OX Security, S…
