Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Protocol Buffers could be made to crash if it received specially crafted input.
It's always unnerving when a system service you rely on day-to-day turns out to be a potential gateway for unauthorized access. That's the story with CVE-2025-…
Protocol Buffers could be made to crash if it received specially crafted input.
The North Korea-linked threat actor known as the Lazarus Group has been attributed to a social engineering campaign that distributes three different pieces of …
Why VPNs Still Matter for Linux UsersLinux has a reputation for strong security, but network security is where the gaps show. The OS gives you a solid base, ye…
Cybersecurity researchers have discovered a malicious Go module that presents itself as a brute-force tool for SSH but actually contains functionality to discr…
CVE-2023-46604 is not just another box on your patching to-do list''it's a major remote code execution (RCE) vulnerability in Apache ActiveMQ that admins need …
Distributed Denial of Service, or DDoS, booters''or IP stressers, as they're also called''represent one of those shadowy operations that nearly seem like they …
Distributed Denial of Service, or DDoS, booters''or IP stressers, as they're also called''represent one of those shadowy operations that nearly seem like they …
SonicWall has revealed that the recent spike in activity targeting its Gen 7 and newer firewalls with SSL VPN enabled is related to an older, now-patched bug a…
In SaaS security conversations, “misconfiguration” and “vulnerability” are often used interchangeably. But they’re not the same thing. And misunderstanding tha…
ruby-graphql is GraphQL language and runtime for Ruby. It was discovered that loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or…
The days of straightforward Linux security threats''malware you could spot with a cursory glance at the logs''are fading fast. Meet "Koske," a new breed of mal…
If you're an admin managing Linux machines, you've got a couple of things on your radar right now. One is CVE-2025-31324, a vulnerability that's got the potent…
You and I know Linux environments have always been the sturdy, reliable workhorses of IT ecosystems. For decades, they've been hailed as these relentless guard…
Cybersecurity researchers have discovered a new hacking technique that exploits weaknesses in the eSIM technology used in modern smartphones, exposing users to…
Sometimes, software updates are just about bug fixes and fine-tuning performance. This one? It's not the kind you can afford to brush off as "I'll get to it ne…
A threat actor with suspected ties to India has been observed targeting a European foreign affairs ministry with malware capable of harvesting sensitive data f…
Cybersecurity researchers have disclosed two security flaws in the Sudo command-line utility for Linux and Unix-like operating systems that could enable local …
Cisco has released security updates to address a maximum-severity security flaw in Unified Communications Manager (Unified CM) and Unified Communications Manag…
U.S. cybersecurity and intelligence agencies have issued a joint advisory warning of potential cyber attacks from Iranian state-sponsored or affiliated threat …
U.S. cybersecurity and intelligence agencies have issued a joint advisory warning of potential cyber attacks from Iranian state-sponsored or affiliated threat …
Two new Chrome vulnerabilities have surfaced, and despite how often we hear about Chrome in the news, these bugs are not the kind we can afford to brush off. B…
The U.S. House of Representatives has formally banned congressional staff members from using WhatsApp on government-issued devices, citing security concerns.Th…
