Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A compromised Linux server can continue running malware long after the initial intrusion. One of the most common persistence techniques is a malicious cron job…
Debian LTS announced a security advisory for gsasl, addressing a denial of service vulnerability due to insufficient input sanitization, recommending an upgrad…
Fedora 44 has updated the rubygem-yard package to version 0.9.40, addressing path traversal issues by backporting fixes from versions 0.9.41 and 0.9.44.
Fedora released an update for rubygem-yard to version 0.9.40-2, addressing path traversal vulnerabilities and allowing users to generate consistent documentati…
A newly disclosed attack technique called HTTP/2 Bomb is drawing attention because it targets the software that sits at the front of much of the Linux internet…
Linux rootkits are old, but they never really disappeared. They just stopped attracting the same attention.
A vulnerability in the Little CMS color management library can cause crashes or arbitrary code execution on certain Ubuntu versions; updates are available for …
A new Mini Shai-Hulud supply chain attack campaign, codenamed Miasma, has compromised @redhat-cloud-services packages to steal credentials and secrets from dev…
Cron has existed in Unix and Linux environments for decades, handling backups, cleanup scripts, patching jobs, log rotation, monitoring tasks, and other mainte…
A new "coordinated" supply chain attack campaign has impacted eight packages on Packagist including malicious code designed to run a Linux binary retrieved fro…
Cybersecurity researchers have disclosed details of a new Linux malware dubbed Showboat that has been put to use in a campaign targeting a telecommunications p…
Proof-of-concept (PoC) exploit code has now been released for a recently patched security flaw in the Linux kernel that could allow for local privilege escalat…
Linux administrators are once again dealing with a familiar problem: a local Linux foothold that can potentially become full root access.
An attacker compromises a Linux container, launches a cryptominer, sets up a way to stay in the system through a background task, and disappears before the inv…
Red Hat released an Important krb5 security update for Red Hat Enterprise Linux 8 this week, addressing two vulnerabilities tracked as CVE-2026-40355 and CVE-2…
Linux runs the internet. More than 96% of the world’s top one million web servers operate on Linux-based systems. That makes every linux server a target by def…
A vulnerability has been discovered in the Exim mail transport agent, which may result in remote code execution. For Debian 11 bullseye, this problem has been …
The problem is not necessarily a lack of security tools. Modern Linux infrastructure changes so quickly that maintaining consistent visibility has become one o…
Debian 14 ''Forky'' will begin blocking packages that fail reproducibility checks, marking a major shift in how Linux distributions verify software integrity.
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
Multiple vulnerabilities were discovered in p7zip, a now unmaintained fork of 7-Zip, a file archiver handling multiple formats. To address these security vulne…
Several security issues were fixed in the Linux kernel.
Linux runs a massive part of the internet. Cloud platforms, databases, containers, web hosting, APIs, and internal business infrastructure all depend heavily o…
