Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 3.1.5 Security fix for CVE-2024-56201
Microsoft kicked off 2025 with a new set of patches for a total of 161 security vulnerabilities across its software portfolio, including three zero-days that h…
Authentication bypass in CEPH RadosGW. (CVE-2024-48916) References: - https://bugs.mageia.org/show_bug.cgi?id=33896 - https://ubuntu.com/security/notices/USN-7…
Command injection via RzBinInfo bclass due legacy code. (CVE-2022-1207) References: - https://bugs.mageia.org/show_bug.cgi?id=33895 - https://lists.opensuse.or…
Update to 3.1.5 Security fix for CVE-2024-56201
As a Linux admin, you know that keeping your systems up-to-date is crucial for maintaining performance and security. The recently released KDE Plasma 6.2.5 off…
Linux security administrators take note: Doctor Web has identified numerous advanced malware trends that pose a severe threat to your systems. Extended Berkele…
New jupyterlab and notebook fixing security vulnerabilities.
New jupyterlab and notebook fixing security vulnerabilities.
New jupyterlab and notebook fixing security vulnerabilities.
New jupyterlab and notebook fixing security vulnerabilities.
We Linux security admins have a new challenge on our hands: several Qualcomm processors/SoCs are still vulnerable to Spectre-related attacks . Despite its prom…
A security vulnerability was discovered in Smarty, a template engine for PHP, which could result in PHP code injection. For the stable distribution (bookworm),…
IBM recently disclosed a critical security vulnerability affecting their Db2 database software on Linux and UNIX platforms, identified as CVE-2024-37071 . This…
Ivanti has released security updates to address multiple critical flaws in its Cloud Services Application (CSA) and Connect Secure products that could lead to …
Several security vulnerabilities have been discovered in zabbix, a network monitoring solution, potentially among other effects allowing denial of service, inf…
As 2025 approaches, we Linux admins are facing new and often unseen cloud-native security obstacles. While skilled at mitigating known risks, emerging vulnerab…
The recent Qt 6.8.1 release brings significant updates and improvements, strengthening its reputation as a secure and reliable application development toolkit.…
Microsoft has addressed four security flaws impacting its artificial intelligence (AI), cloud, enterprise resource planning, and Partner Center offerings, incl…
Security fix for CVE-2024-52304
Compression utilities like 7-Zip have become essential tools for managing and storing data efficiently. Renowned for its high compression ratio and versatility…
We hear terms like “state-sponsored attacks” and “critical vulnerabilities” all the time, but what’s really going on behind those words? This week’s cybersecur…
This is the .NET 9.0 GA release. It contains security fixes for CVE-2024-43498 and CVE-2024-43499 Announcement: https://devblogs.microsoft.com/dotnet/announcin…
Multiple decade-old security vulnerabilities have been disclosed in the needrestart package installed by default in Ubuntu Server (since version 21.04) that co…
