Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Moderate: protobuf-c security update
The Gaslight macOS malware from a North Korean cluster doesn't bypass AI analysis platforms yet, but its 38-message prompt injection cascade makes the directio…
Moderate: protobuf-c security update
Moderate: protobuf-c security update
Moderate: protobuf-c security update
Moderate: protobuf-c security update
nginx-mod-brotli: Rebuild for 1.30.3 nginx-mod-fancyindex: Rebuild for 1.30.3 nginx-mod-vts:
Moderate: protobuf-c security update
Moderate: protobuf-c security update
Moderate: protobuf-c security update
Moderate: protobuf-c security update
Moderate: protobuf-c security update
AI-assisted patches are already showing up across open source. Small GitHub projects, package updates, kernel-adjacent tools, system libraries. It’s not a futu…
Coturn 4.13.1 What's in this release Security fixes What's Changed Null-terminate server_name in stun_is_challenge_response_str
A SANS audit of 14 patched SonicWall firewalls shows Akira ransomware still getting in via stale accounts and LDAP misconfigurations the firmware update never …
A new malware family is turning forgotten home routers into a distributed reconnaissance and proxy network, not the DDoS botnet these devices usually end up in…
Coturn 4.13.1 What's in this release Security fixes What's Changed Null-terminate server_name in stun_is_challenge_response_str
# Security update for rootlesskit Announcement ID: SUSE-SU-2026:2451-1 Release Date: 2026-06-18T13:48:10Z Rating: important References:
# Security update for rootlesskit Announcement ID: SUSE-SU-2026:2452-1 Release Date: 2026-06-18T13:49:19Z Rating: important References:
A vulnerability was discoverd in Nginx, a high-performance web and reverse proxy server, which could result in remote code execution and denial of service. For…
Cybersecurity researchers have flagged a "coordinated malware campaign" on the JetBrains Marketplace that has published no less than 15 malicious plugins capab…
Remote support platforms sit close to the systems attackers want most: administrator workflows, technician accounts, and managed endpoints. That is why the Sim…
MIT's Fractal OS has found the first evidence of Apple M1 Phantom speculation and overturned prior research on the M1's conditional branch predictor, challengi…
The Vietnam-aligned threat actor known as OceanLotus has been attributed to two distinct campaigns that targeted domestic entities and stock investors with a b…
