Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
openSUSE Tumbleweed has released an update for the libknet-devel-1.33-2.1 package addressing three vulnerabilities, enhancing security within the software.
A security update for the kernel-rt on Rocky Linux 8 addresses vulnerabilities, including potential I/O checks and memory issues, requiring attention to ensure…
Fedora 43 systemd update to version 258.10 includes numerous bugfixes and security improvements. Users can upgrade using the dnf command for enhanced system an…
Fedora released an update for skopeo addressing a DoS vulnerability related to DNS SAN processing, enhancing security and including a rebuild with a fixed vers…
Fedora 44 has released an update for systemd version 259.8, addressing bugs and security issues, and enhancing system management capabilities. Install via the …
An update for perl-HTTP-Date-6.80.0-1.1 on openSUSE Tumbleweed addresses a vulnerability identified as CVE-2026-14741, providing security improvements for user…
The Fedora update for p11-kit version 0.26.4 addresses stack exhaustion, error messages, and memory management issues, providing improved security and stabilit…
An update for ffmpeg-7-7.1.4-5.1 in openSUSE Tumbleweed addresses a vulnerability (CVE-2026-12706) rated moderate, allowing for installation to enhance securit…
Fedora has released a notification for updating the lego package to version 5.3.1, an ACME client in Go, addressing issue rhbz#2504092 and related security con…
Fedora 44 has released Traffic Server 10.1.3, enhancing performance and resolving security vulnerabilities, including a DoS issue in HTTP/2 and various other b…
A weak random-number generator behind the Ill Bloom vulnerability has let attackers drain over $5 million from crypto wallets. Here's how to check exposure and…
A Cursor zero-day vulnerability lets a planted git.exe run automatically when a Windows developer opens a repository. Mindgard disclosed it after seven months …
A researcher found that anyone with physical access to one Shark robot vacuum can extract its AWS IoT certificate and use it to take over other Shark vacuums r…
WordPress 6.9.5 and 7.0.2 fix wp2shell, a core REST API bug chaining route confusion and SQL injection into unauthenticated remote code execution.wp2shell: Wor…
A heap-based buffer overflow in 7-Zip's XZ decoder, patched in version 26.02, let a crafted archive run code on extraction and had gone unnoticed for five year…
An AI-driven threat actor called JADEPUFFER built ransomware that hunts AI model files specifically, entering through a known Langflow RCE and pivoting via an …
A practical checklist for the Azure DevOps MCP flaw that lets hidden PR comments hijack AI coding agents, plus the configuration changes to make right now.Azur…
Cisco Talos has detailed msaRAT, a Rust-based RAT used by the Chaos ransomware crew that drives a headless Chrome or Edge session over CDP to smuggle C2 traffi…
A three-line SVG gave XBOW SYSTEM access on Bing's servers through a default ImageMagick setting. Here's the exploit chain and a checklist for anyone running a…
A practical checklist for the Fastjson RCE vulnerability (CVE-2026-16723): how the exploit chain works, four questions to answer this week, and how to mitigate…
openSUSE has released a security update for java-17-openjdk addressing nine vulnerabilities and includes bug fixes, with installation methods recommended throu…
openSUSE has released a security update for nginx addressing three vulnerabilities, including authorization bypass and buffer overflows, along with four bug fi…
An update for java-25-openjdk on openSUSE Tumbleweed fixes nine vulnerabilities, improving security posture with moderate ratings assigned to several CVEs. Use…
An update for libsrt1_5-1.5.6-1.1 on openSUSE Tumbleweed addresses two security vulnerabilities, allowing installation of the fixed packages.
