The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker …
Google on Wednesday took the wraps off Gemini 4 Carbon, its latest frontier model with state-of-the-art cybersecurity and long-horizon capabilities. "It shows …
An MCP security flaw in Google's open-source Toolbox for Databases could let an attacker copy files off the server running it or replace files on that machine.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista…
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments.…
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumen…
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on O…
Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patch…
Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports.…
A September 23 advisory describes a flaw in the Python SDK used with MCP Toolbox: a shared cache could send a Google ID token to a service it was not meant for.
Most administrators do not think about BIND, browser engines, or cloud kernels until one of them fails.
Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data.The first is an automated…
Chrome release notes can be a blur of version numbers. This one deserves a closer look. In the Linux build published on September 3, 2026, Google fixed CVE-202…
The Fedora 43 update for NextCloud version 34.0.3 addresses multiple security vulnerabilities including XSS and prototype pollution, enhancing the file sync an…
Fedora 44 has released an update for NextCloud version 34.0.3, addressing multiple security vulnerabilities including cross-site scripting and prototype pollut…
A security update for google-osconfig-agent addresses two vulnerabilities in SUSE Linux Micro 6.1, prompting users to install patches to mitigate risks of priv…
A security update for google-guest-agent addressing two vulnerabilities in SUSE Linux Micro 6.1 is now available, with important fixes for privilege escalation…
A security update for google-guest-agent addresses two vulnerabilities in SUSE Linux Micro 6.0, facilitating potential privilege escalation and an infinite loo…
A security update for google-osconfig-agent addresses CVE-2026-56852, fixing an improper handling of invalid UTF-8 bytes that could cause an infinite loop in a…
A security update for google-guest-agent has been released to address CVE-2026-56852, which involves improper handling of invalid UTF-8 leading to infinite loo…
SUSE has released a security update for google-guest-agent addressing two vulnerabilities that could lead to validation bypass and infinite loops, affecting se…
Fedora 43 has updated Nextcloud to version 34.0.2, enhancing file synchronization capabilities while addressing security flaws related to URI host validation i…
Fedora 44 has updated NextCloud to version 34.0.2, offering file syncing and sharing, with improvements and bug fixes related to security flaws and enhancement…
openSUSE has released a security update for google-guest-agent, addressing two vulnerabilities that could lead to privilege escalation and an infinite loop iss…