Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A weak random-number generator behind the Ill Bloom vulnerability has let attackers drain over $5 million from crypto wallets. Here's how to check exposure and…
A researcher found that anyone with physical access to one Shark robot vacuum can extract its AWS IoT certificate and use it to take over other Shark vacuums r…
WordPress 6.9.5 and 7.0.2 fix wp2shell, a core REST API bug chaining route confusion and SQL injection into unauthenticated remote code execution.wp2shell: Wor…
A three-line SVG gave XBOW SYSTEM access on Bing's servers through a default ImageMagick setting. Here's the exploit chain and a checklist for anyone running a…
A practical checklist for the Fastjson RCE vulnerability (CVE-2026-16723): how the exploit chain works, four questions to answer this week, and how to mitigate…
An update for the moby-engine in Fedora 43 has been released, addressing upstream security vulnerabilities and introducing version 29.6.2, making Docker contai…
The Fedora 44 update for the google-osconfig-agent version 20260717.00 includes several enhancements and bug fixes, addressing issues like build failures and a…
openSUSE has released a security update for helm addressing two vulnerabilities, CVE-2026-39821 and CVE-2026-56852, along with bug fixes. The update is availab…
An update for helm3-3.21.3-3.1 on openSUSE Tumbleweed addresses a vulnerability (CVE-2026-56852), with moderate ratings and fixes available for related package…
Two newly fixed storage bugs in Kubernetes showed more than just a problem with path traversal. They found a common security flaw in the cloud: powerful parts …
openSUSE released a security update for the gh package to address CVE-2026-39821, which involves rejecting certain Punycode labels in the idna package, rated i…
Debian issued an advisory for imagemagick, addressing multiple security vulnerabilities that could cause denial of service or arbitrary code execution; updates…
An update for openSUSE Tumbleweed addresses four security vulnerabilities in the apache-sshd-2.19.0-2.1 package, enhancing system protection against identified…
A vulnerability in libhttp-date-perl affects multiple Ubuntu versions, allowing specially crafted input to cause excessive resource usage and potential denial …
openSUSE has released a security update for trivy addressing three vulnerabilities, which includes fixes for privilege escalation and credential forwarding, av…
A security update for .NET 9.0 on Rocky Linux 9 addresses several vulnerabilities and includes bug fixes and enhancements, with updated SDK and runtime version…
A security update for .NET 8.0 on Rocky Linux 9 addresses multiple vulnerabilities, including denial of service and privilege escalations, with new SDK and run…
Rocky Linux 10 has released an important update for .NET 9.0, fixing multiple vulnerabilities, enhancing security, and addressing various bugs with specific ne…
A Linux server can be fully patched, hardened, and compliant, yet still leave investigators unable to explain how an attacker got in. Without reliable Linux lo…
A critical update for .NET 9.0 on Rocky Linux 8 addresses multiple security vulnerabilities and includes bug fixes, with new versions available for SDK and run…
The Fedora update notification details several nginx module rebuilds and a version update to fix critical vulnerabilities, including CVE-2026-42533, while prov…
Ubuntu Security Notice USN-8596-1 details several security vulnerabilities in the Linux kernel affecting Ubuntu 22.04 and 24.04, requiring immediate system upd…
Fedora 43 has released kernel version 7.1.4-104, addressing security issues and containing updates. Users can upgrade using the dnf command line tool.
Most Linux teams don't struggle to find vulnerabilities anymore. They struggle to decide which ones deserve attention first. Between daily scanner results, ven…
