Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Cybersecurity researchers have disclosed a security "blind spot" in Google Cloud's Vertex AI platform that could allow artificial intelligence (AI) agents to b…
One unauthenticated HTTP request is all it takes. From there, attackers can move from the edge straight into your internal network, operating from a system you…
A single unpatched server opens a path into systems that were never meant to be exposed, and because nothing appears broken, that access can remain in place fo…
Update to 146.0.7680.153 * CVE-2026-4439: Out of bounds memory access in WebGL * CVE-2026-4440: Out of bounds read and write in WebGL * CVE-2026-4441: Use afte…
Update to 146.0.7680.153 * CVE-2026-4439: Out of bounds memory access in WebGL * CVE-2026-4440: Out of bounds read and write in WebGL * CVE-2026-4441: Use afte…
An out-of-bounds read vulnerability was discovered in VLC media player, a multimedia player and streamer. The MMS protocol handler in mmstu.c did not properly …
n8n (CVE-2025-68613) is an open-source automation tool used to connect APIs, databases, and SaaS apps into workflows. It is commonly used to move data between …
n8n (CVE-2025-68613) is an open-source automation tool used to connect APIs, databases, and SaaS apps into workflows. It is commonly used to move data between …
A flaw was found in ansible, a configuration management, deployment, and task execution system. This vulnerability allows attackers to bypass unsafe content pr…
Cisco has disclosed that two more vulnerabilities affecting Catalyst SD-WAN Manager (formerly SD-WAN vManage) have come under active exploitation in the wild.T…
Valkey 8.0.7 - Released Mon 23 February 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Securit…
Valkey 8.1.6 - Released Mon 23 February 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Securit…
It was discovered that SPIP, a website engine for publishing, would allow a malicious user to access protected information, and perform various SQL injection, …
Cybersecurity researchers have disclosed details of a now-patched security flaw in Google Chrome that could have permitted attackers to escalate privileges and…
Release 1.6.13 Managesieve: Fix handling of string-list format values for date tests in Out of Office (#10075) Fix remote image blocking bypass via SVG content…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, cit…
Microsoft on Tuesday released security updates to address a set of 59 flaws across its software, including six vulnerabilities that it said have been exploited…
Cybersecurity researchers have discovered a new supply chain attack in which legitimate packages on npm and the Python Package Index (PyPI) repository have bee…
xrdp is an open source RDP server. It was found that xrdp contains an unauthenticated stack-based buffer overflow vulnerability. The issue stems from improper …
Multiple vulnerabilities has been discovered in libmatio, a MAT File I/O Library. CVE-2025-50343 A Denial of Service (DoS) and in certain cases heap corruption…
Google on Tuesday revealed that multiple threat actors, including nation-state adversaries and financially motivated groups, are exploiting a now-patched criti…
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which may result in denial of service, information leaks, or potentia…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, ci…
Kyu Neushwaistein discovered that telnetd from inetutils does not sanitize the USER environment variable before passing it on to login. A remote attacker can t…
