Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several vulnerabilities were discovered in xrdp, a Remote Desktop Protocol (RDP) server
Imagine this: you're neck-deep in code, deploying a Python app you've poured hours into. Your dependencies''those trusty libraries''are the silent workhorses i…
In modern computing, the line dividing speed from security is razor-thin. Performance innovations have helped processors handle billions of instructions per se…
Update to version 1.5.0 (for now, without PPS feature enabled due to potential correctness issues in the code). Release notes: https://github.com/pendulum-proj…
Update to version 1.5.0 (for now, without PPS feature enabled due to potential correctness issues in the code). Release notes: https://github.com/pendulum-proj…
Google Chrome 136 is here, and it's not just another version bump''it addresses critical security vulnerabilities, including a long-standing privacy risk tied …
The highly anticipated OpenBSD 7.7 release is here, and it's packed with enhancements that security-conscious administrators will appreciate. Known for its "se…
Cybersecurity researchers have shed light on a Russian-speaking cyber espionage group called Nebulous Mantis that has deployed a remote access trojan called Ro…
LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others). CVE-2025-43961
If you're managing an Oracle Linux system, you're well aware that vigilance is essential for staying ahead of adversaries looking to exploit unpatched vulnerab…
Linux's case-sensitive filesystems have long been seen as essential to the reliability and security of our much-loved OS. Still, recent discussions , led by Li…
BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refsAleandro Prudenzano of Doyensec and Edoardo Geraci of Codean Labs reported a bu…
Oracle Ksplice is an invaluable tool that fundamentally reshapes how we apply and monitor Linux security patches. Oracle Ksplice's Known Exploit Detection take…
Update to 128.9.2 https://www.thunderbird.net/en-US/thunderbird/128.9.1esr/releasenotes/ https://www.thunderbird.net/en-US/thunderbird/128.9.2esr/releasenotes/…
A recently disclosed security flaw in Gladinet CentreStack also impacts its Triofox remote access and collaboration solution, according to Huntress, with seven…
This is major rework of alternatives usage. We are (finally!) dropping the parallel installs support, and moving back to good, old "java-xyz-openjdk" major alt…
In our ongoing quest to combat sophisticated security vulnerabilities, we Linux admins are always looking for innovative new tools and techniques to safeguard …
pam_cap: Fix potential configuration parsing error. (CVE-2025-1390) References: - https://bugs.mageia.org/show_bug.cgi?id=34048 - https://ubuntu.com/security/n…
Node.js a JavaScript runtime environment was affected by a vulnerability. A memory leak could occur when a remote peer abruptly closes the socket without sendi…
Multiple vulnerabilities have been found in libxml2, a library providing support to read, modify and write XML and HTML files. These vulnerabilities could pote…
This update addresses a null pointer dereferencing issue that could cause the session for a client that sent specially-crafted commands to the server to crash …
This update addresses a null pointer dereferencing issue that could cause the session for a client that sent specially-crafted commands to the server to crash …
Bing Shi discovered that GnuTLS, a portable library which implements the Transport Layer Security and Datagram Transport Layer Security protocols, had ineffici…
Taking advantage of open-source AI's benefits while mitigating potential associated risks is an ongoing struggle and balancing act for security admins. While l…
