Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Spreadsheet::XLSX 0.20 Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata. Security: val…
An update that solves 5 vulnerabilities can now be installed.
From Norway’s aid agency, Norad, November 3: Norad has been targeted by a cyberattack in which the perpetrators may have gained access to the names and email a…
Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, ac…
The U.S. is working on extraditing three suspects from Europe in a case involving more than $100 million in fraud from CEO impersonations.
update to 1.102.5 update to 1.98.10, fix several cves
Update to 3.3.4
update to 1.102.5 update to 1.98.10, fix several cves
The sanctions target four people and 41 companies linked to the Prince Group — a Cambodian company accused of running a billion-dollar scam operation.
Cybersecurity researchers have disclosed details of a now-patched vulnerability that could be exploited to bypass Lockdown Mode protections in OpenAI ChatGPT. …
An update that solves 3 vulnerabilities can now be installed.
Lee Trewhela reports: The Royal Cornwall Hospitals Trust (RCHT) has admitted a huge data breach has led to many affected staff experiencing “significant distre…
Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers a…
Security update
The following updated rpms for have been uploaded to the Unbreakable Linux Network:
A China-aligned threat actor known as SlippyNunchucks has been attributed to a Domain Name System (DNS) hijacking operation abusing insecure HTTP communication…
An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.
Update to upstream-1.5.5. Includes fix for go CVE-2026-111943.
Update to upstream 1.5.5. Includes fix for go CVE-2026-111943.
Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications.…
Large language model hijacking attacks, also known as LLMjacking, are generating large fraudulent cloud charges, with some organizations losing more than $100,…
A 3AM ransomware affiliate targeted a school estate in the UK and successfully encrypted around 37 of nearly 50 machines reached from an unmanaged host.…
Update uv and python-uv-build to version 0.13.5. This includes some breaking changes to uv (but none to python-uv-build); however, most users will not need to …
A recent post by the BYOD gang appears to line up with a security incident that prompted campus-wide action at Michigan State University. BYOD drew attention i…
