The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Booth could allow unintended access to network services.
The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party security product the e…
It was discovered that there were two vulnerabilities in the Redis key/value database. CVE-2026-81934 CVE-2026-81934: Prevent a use-after-free vulnerability in…
Update to 1.26.1 (rhbz#2535076) Security fix list from upstream: Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code Execution when digesting DNS…
Attackers are exploiting a critical Cisco ISE flaw that can open the product’s web management interface without a valid login. Cisco disclosed CVE-2026-76460 o…
Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC validator, maintainer NLnet Labs said in an advisory on Wedn…
On September 10, 2026, Wiz Research reported that multiple attackers had chained two Artifactory vulnerabilities against self-hosted repositories. One flaw gav…
Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewa…
Fix for https://access.redhat.com/security/cve/cve-2026-16615
Fix for https://access.redhat.com/security/cve/cve-2026-16615
Listing network routes should tell administrators where traffic will go. An IPv6 security report instead shows Linux accessing a freed record used to keep trac…
A moderate security update for Grafana on Rocky Linux 9 addresses privilege escalation and unauthorized access vulnerabilities, while also including various bu…
SUSE Linux Enterprise has released a security update addressing 18 vulnerabilities in the kernel, including fixes for issues related to memory leaks and out-of…
The security update for SUSE Linux Enterprise 15 SP4 addresses 19 vulnerabilities, enhancing system security by fixing various issues including memory leaks an…
Debian has addressed two vulnerabilities in libnet-dns-perl that pose risks of denial of service and remote code execution, advising users to upgrade to versio…
SUSE has released a security update for helm, rebuilding it against the latest Go security release, affecting several SUSE Linux Enterprise products and access…
A security update for podman addresses two vulnerabilities in openSUSE Leap 15.3 and SUSE Enterprise Storage 7.1, allowing unauthorized host filesystem access …
Fedora released WordPress version 6.9.7, addressing multiple security vulnerabilities, including remote code execution, various XSS issues, privilege escalatio…
Multiple vulnerabilities in Bind9 affecting various Ubuntu LTS versions have been addressed, potentially allowing remote attacks leading to impersonation, deni…
Fedora has released an update for lemonldap-ng to version 2.23.3, fixing CVE-2026-19349, enhancing web SSO and access management functionality.
Rocky Linux 8 has an important security update for python3 due to a CVE vulnerability allowing directory access bypass, impacting the security of the Python ru…
The Fedora 43 update for libnfs version 6.0.2 addresses CVE-2026-57918 and CVE-2026-53689 vulnerabilities, improving security for accessing NFS shares over a n…
Fedora 43 has updated lemonldap-ng to version 2.23.3, addressing CVE-2026-19349, enhancing its Web Single Sign On and Access Management features for improved s…
A security update for Performance Co-Pilot (PCP) on Rocky Linux 10 addresses vulnerabilities including arbitrary command execution, privilege escalation, unaut…