Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under…
Today is Microsoft's October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively exploited and two publi…
Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway.…
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The cr…
Deepanshu Kartikey has submitted a patch for a Linux filesystem bug that lets a crafted JFS disk image overwrite kernel memory during a directory listing.
A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic, which is partly the problem. This week’s threats keep fi…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to its Known Exploited Vulnera…
Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into it and read or change files anywhere e…
The urwid web display backend generates web session identifiers by concatenating two random.randrange(10**9) calls that use Python's Mersenne Twister PRNG, whi…
Listing network routes should tell administrators where traffic will go. An IPv6 security report instead shows Linux accessing a freed record used to keep trac…
Rocky Linux 9 released an important security update for python3.12 addressing a vulnerability that allows directory bypass during tarfile extraction, with a CV…
An important security update for python3.14 on Rocky Linux 10 addresses a critical vulnerability allowing directory bypass in tarfile extraction, with detailed…
A security update for rsync addresses 33 vulnerabilities, enhancing system protection against risks such as directory escape, command injection, and privilege …
A security update for podman addresses two vulnerabilities affecting openSUSE Leap 15.3 and SUSE Enterprise Storage 7.1, enabling prevention of directory manip…
Rocky Linux 8 has an important security update for python3 due to a CVE vulnerability allowing directory access bypass, impacting the security of the Python ru…
Fedora has released an update for Python 3.14.7, addressing vulnerabilities including DoS in the HTML parser and directory bypass in tarfile extraction, enhanc…
A critical security update for rsync addresses 34 vulnerabilities, including command injection and directory traversal issues, affecting multiple SUSE Linux pr…
A critical security update for the 389 Directory Server on Rocky Linux 8 addresses multiple vulnerabilities, including LDAP filter injection and a buffer overf…
A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to ach…
Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced pers…
A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts.The vulnerability, tracked as CVE-2026-58231, …
A security update for python3.9 on Rocky Linux 9 addresses a critical vulnerability, allowing directory escape during tarfile extraction, rated with a CVSS sco…
SUSE released an important security update for podman addressing two vulnerabilities that allow directory creation and ownership modification, as well as unint…
Fedora 44 kernel version 7.1.4-204 has been released with important security fixes addressing active exploits, and it can be updated using the DNF package mana…
