Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student protest movement, was infected with NSO Group's …
Update Django 5 to version 5.2.18 Fixes CVE-2026-77050 [low]: Potential denial-of-service vulnerability in get_supported_language_variant() Fixes CVE-2026-8442…
Update Django 5 to version 5.2.18 Fixes CVE-2026-77050 [low]: Potential denial-of-service vulnerability in get_supported_language_variant() Fixes CVE-2026-8442…
Update Django 6 to version 6.1.2 Fixes CVE-2026-77050 [low]: Potential denial-of-service vulnerability in get_supported_language_variant() Fixes CVE-2026-84429…
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-s…
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability,…
SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company's network and applications.…
In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol d…
Several vulnerabilities were discovered in node-lodash, a Node.js module providing utility functions for common programming tasks. CVE-2025-13465 Prototype pol…
Several vulnerabilities have been discovered in the WebKitGTK web engine, that may lead to heap corruption, local privilege escalation, remote code execution, …
parted: Fix partition number allocation in do_print (bcl) fdasd: Make sure data set name is positive (bcl) resize: Make sure hfsc_new_cachetable cannot overflo…
Catalyst::Plugin::Static::Simple for Perl sets the Cache‑Control header to "public" for every static asset served. Consequently, intermediaries such as shared …
FreeIPA 4.13.4 security release Upstream release notes: https://www.freeipa.org/release-notes/4-13-4.html
A domain used as harmless placeholder text showed up in roughly 1,700 repositories. Then somebody registered it and started serving malicious lures. That is th…
Several vulnerabilities have been discovered in OpenSSL, a Secure Socket Layer toolkit providing the SSL and TLS cryptographic protocols for secure communicati…
Multiple vulnerabilities were found in memcached, high-performance in-memory object caching system. CVE-2023-46852 a buffer overflow exists when processing mul…
FreeIPA 4.13.4 security release Upstream release notes: https://www.freeipa.org/release-notes/4-13-4.html
Multiple issues were found in libde265, an open source implementation of the H.265 video codec, which potentially may result in denial of service, heap/buffer …
Multiple vulnerabilities has been found in libevent, an event notification library. CVE-2026-63379 (GHSA-2gmv-p5m7-98p6) Sebastianosrt discovered that libevent…
Attackers are exploiting a critical Cisco ISE flaw that can open the product’s web management interface without a valid login. Cisco disclosed CVE-2026-76460 o…
The Fedora 43 update for NextCloud version 34.0.3 addresses multiple security vulnerabilities including XSS and prototype pollution, enhancing the file sync an…
Fedora 44 has released an update for NextCloud version 34.0.3, addressing multiple security vulnerabilities including cross-site scripting and prototype pollut…
Ubuntu has issued a security notice addressing multiple vulnerabilities in the Linux-nvidia-6.17 kernel for version 24.04 LTS, urging users to update and reboo…
Ubuntu released Security Notice USN-8643-3 addressing vulnerabilities in the Linux kernel affecting versions 22.04 and 24.04 LTS, requiring updates and potenti…
