The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes 6 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that solves one vulnerability and contains one feature can now be installed.
An update that solves one vulnerability and contains one feature can now be installed.
An update that solves seven vulnerabilities, contains three features and has 14 security fixes can now be installed.
An update that solves seven vulnerabilities, contains three features and has 14 security fixes can now be installed.
An update that solves seven vulnerabilities, contains three features and has 14 security fixes can now be installed.
An update that solves seven vulnerabilities, contains three features and has 14 security fixes can now be installed.
An update that solves 10 vulnerabilities, contains one feature and has two fixes can now be installed.
An update that solves 21 vulnerabilities and contains one feature can now be installed.
GitHub is moving to strengthen software supply chain security by updating "actions/checkout" to block pwn request attacks that exploit the risky use of the "pu…
An update that solves one vulnerability and has one errata is now available.
An update that fixes one vulnerability is now available.
More than 4,300 internet-facing devices have been pulled into a newly documented router malware campaign called AryStinger. The infected systems are mostly not…
The difference between a virus and a worm is not semantic. A virus waits for a user to trigger it; a worm exploits vulnerabilities and spreads on its own. That…
An update that solves 21 vulnerabilities and contains one feature can now be installed.
An update that solves 21 vulnerabilities and contains one feature can now be installed.
An update that solves 21 vulnerabilities and contains one feature can now be installed.
An update that solves 21 vulnerabilities and contains one feature can now be installed.
The recent Keystone advisory is unusual because the vulnerabilities are scattered across several features but keep affecting the same class of security control…
CVE-2026-42530, the NGINX HTTP/3 vulnerability rated CVSS 9.2, is collecting dismissals because exploitation requires ASLR to be disabled or bypassed. Here is …
An update that solves seven vulnerabilities, contains three features and has 14 security fixes can now be installed.
Metric names and values are now validated to ensure they do not contain characters below ASCII 32 (including newlines), colon (":") or pipe ("|") characters th…