Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Latest upstream bugfix release from 3.6.2 branch. Changes: https://github.com/adventuregamestudio/ags/releases/tag/v3.6.2.22 . Also fixes CVE-2026-95512 in bun…
Latest upstream bugfix release from 3.6.2 branch. Changes: https://github.com/adventuregamestudio/ags/releases/tag/v3.6.2.22 . Also fixes CVE-2026-95512 in bun…
Latest upstream security bugfix release. Changes: https://github.com/strukturag/libheif/releases/tag/v1.23.7 .
Update to version 0.12.1. https://github.com/charmbracelet/vhs/releases/tag/v0.12.1
Latest upstream security bugfix release. Changes: https://github.com/strukturag/libheif/releases/tag/v1.23.7 .
Latest upstream security bugfix release. Changes: https://github.com/strukturag/libheif/releases/tag/v1.23.7 . Update libheif to 1.23.6 Yet another security an…
Update to version 2.1.6. Release notes: https://github.com/syncthing/syncthing/releases/tag/v2.1.4 https://github.com/syncthing/syncthing/releases/tag/v2.1.5 h…
A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over…
Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Cla…
Release of stargz snapshotter v0.19.0, containing fixes for CVE-2026-71482 and CVE-2026-77395. Release note is available on https://github.com/containerd/starg…
Release of stargz snapshotter v0.19.0, containing fixes for CVE-2026-71482 and CVE-2026-77395. Release note is available on https://github.com/containerd/starg…
Update to 2.31.6 which addresses: CVE-2026-110450 (High, https://github.com/NixOS/nix/security/advisories/GHSA- jwvx-xq5j-gc56) and other Moderate issues: see …
Update to 2.35: https://nix.dev/manual/nix/2.35/release-notes/rl-2.35.html Version 2.35.3 addresses: CVE-2026-110450 (High, https://github.com/NixOS/nix/securi…
Important: golang-github-openprinting-ipp-usb security update
Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks invol…
An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool on Monday, October 1…
Update libheif to 1.23.6 Yet another security and bugfix release, see https://github.com/strukturag/libheif/releases/tag/v1.23.6
Update libheif to 1.23.6 Yet another security and bugfix release, see https://github.com/strukturag/libheif/releases/tag/v1.23.6
Update to version 2.1.6. Release notes: https://github.com/syncthing/syncthing/releases/tag/v2.1.4 https://github.com/syncthing/syncthing/releases/tag/v2.1.5 h…
Update to version 2.1.6. Release notes: https://github.com/syncthing/syncthing/releases/tag/v2.1.4 https://github.com/syncthing/syncthing/releases/tag/v2.1.5 h…
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent S…
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrator…
See https://github.com/jupytext/jupytext/blob/main/CHANGELOG.md for changes in versions 1.19.5 and 1.19.6. For this update, a patch has been applied that rever…
Patch to fix CVE-2026-79079. Ensure that basic functionality works (installation of modules, browsing through modules, searching), and ensure that the PoC at h…
