Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Rich Mirch discovered that sudo, a program designed to provide limited super user privileges to specific users, does not correctly handle the host (-h or --hos…
The threat actor behind the GIFTEDCROOK malware has made significant updates to turn the malicious program from a basic browser data stealer to a potent intell…
At long last, Oracle Linux 10 has arrived , and it's not just another checkbox upgrade. Whether you're running on x86_64 or aarch64 platforms, this release aim…
Rebuild applications to apply two recent security updates: build with idna 1.0.0+ to address CVE-2024-12224 (idna accepts Punycode labels that do not produce a…
Rebuild applications to apply two recent security updates: build with idna 1.0.0+ to address CVE-2024-12224 (idna accepts Punycode labels that do not produce a…
Rebuild applications to apply two recent security updates: build with idna 1.0.0+ to address CVE-2024-12224 (idna accepts Punycode labels that do not produce a…
Linux admins who value privacy directly baked into their operating system should undoubtedly give Securonis a hard look. It's not a name that's been bouncing a…
IBM recently announced that it was donating its CBOM toolset to the Post-Quantum Cryptography Alliance (PQCA) under the Linux Foundation. If you're a Linux adm…
As a Linux admin, you're no stranger to juggling servers, permissions, and late-night emergencies. Let me introduce you to Qilin ransomware ''a crafty, cross-p…
You know how we always preach to secure everything: servers, processes, applications? It turns out that a lot of us missed a serious blind spot hiding in plain…
You know how it goes''Linux admins have long prided themselves on running systems that ransomware gangs mostly ignored. Sure, the occasional attack would trick…
Let's cut to the chase''if you're running any system with X.Org X server or Xwayland versions prior to the latest patches , your setup may be dangerously expos…
The Qualys Threat Research Unit (TRU) discovered a local privilege escalation vulnerability in libblockdev, a library for manipulating block devices. An "allow…
A stack buffer-overflow in the H.265 codec parser has been fixed in the "bad" set of codecs for the GStreamer multimedia framework. For Debian 11 bullseye, thi…
Cybersecurity involves both playing the good guy and the bad guy. Diving deep into advanced technologies and yet also going rogue in the Dark Web. Defining tec…
Alright, sysadmins and infosec pros, let's talk about Chaos RAT. If you haven't already crossed paths with this rather persistent piece of malware, it's time y…
Threat hunters are calling attention to a new variant of a remote access trojan (RAT) called Chaos RAT that has been used in recent attacks targeting Windows a…
Cybersecurity researchers have disclosed details of a critical security flaw in the Roundcube webmail software that has gone unnoticed for a decade and could b…
Crashes happen. Servers, desktops, and embedded systems all stumble occasionally, leaving behind a snapshot of their memory '' a core dump. For years, tools li…
First impressions matter, don't they? When a new operating system release shows up '' especially one as significant as AlmaLinux OS 10 '' there's that crucial …
Zero-day vulnerabilities are a nightmare for any Linux admin, and here's the latest one that demands your attention: CVE-2025-4664 . If you're running Chrome o…
Update to 128.10.2 https://www.thunderbird.net/en-US/thunderbird/128.10.2esr/releasenotes/ Update to 128.10.1 https://www.mozilla.org/en-US/security/advisories…
It’s not enough to be secure. In today’s legal climate, you need to prove it.Whether you’re protecting a small company or managing compliance across a global e…
Cybersecurity researchers have discovered a new campaign that employs malicious JavaScript injections to redirect site visitors on mobile devices to a Chinese …
