Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves four vulnerabilities and contains one feature can now be installed.
An update that fixes one vulnerability is now available.
An update that solves six vulnerabilities and contains one feature can now be installed.
New libidn packages are available for Slackware 15.0 and -current to fix security issues.
An update that solves 21 vulnerabilities and contains one feature can now be installed.
CVE-2026-20253 is a CVSS 9.8 pre-auth flaw in Splunk Enterprise's PostgreSQL sidecar service. An unauthenticated attacker can write files and chain the primiti…
CVE-2026-0257's GlobalProtect authentication bypass went from advisory to active exploitation in four days. The recurring pattern of perimeter device failures …
A CVSS 9.3 flaw in Check Point Remote Access VPN let unauthenticated attackers bypass certificate validation by supplying a crafted IKEv1 VendorID payload — ex…
Attackers are actively exploiting a high-severity vulnerability in Langflow, an open-source platform used to build and run AI workflows.
A high-severity security flaw in Langflow, an open-source low-code platform to build artificial intelligence (AI) applications, has come under active exploitat…
Cybersecurity researchers have disclosed details of an unpatched issue that could be exploited to disclose a user's NTLMv2 hash to the attacker.Like in the cas…
A critical security vulnerability has been disclosed in Gogs, a popular open-source self-hosted Git service, that allows an authenticated user to execute arbit…
Cron has existed in Unix and Linux environments for decades, handling backups, cleanup scripts, patching jobs, log rotation, monitoring tasks, and other mainte…
Microsoft has disclosed that a privilege escalation and a denial-of-service flaw in Defender has come under active exploitation in the wild.The former, tracked…
An update that solves one vulnerability, contains one feature and has two fixes can now be installed.
The 7.0.7 stable kernel update contains a number of important fixes across the tree. It also patches up a vulnerable codepath for fragnesia that was not in the…
PHP version 8.4.21 (07 May 2026) Core: Fixed bug GH-19983 (GC assertion failure with fibers, generators and destructors). (iliaal) Fixed bug GH-21478 (Forward …
The 7.0.7 stable kernel update contains a number of important fixes across the tree. It also patches up a vulnerable codepath for franesia that was not in the …
Linux administrators are once again dealing with a familiar problem: a local Linux foothold that can potentially become full root access.
It was discovered that nghttp2, an implementation of the HTTP/2 protocol, could be crashed via an assertion failure. A remote attacker could exploit this to ca…
The 6.19.14-102 stable kernel update contains a fix for the Fragnesia CVE-2026-46300.
A vulnerabilitie was discovered in nghttp2, a server, proxy and client implementing HTTP/2. CVE-2026-27135 Fix missing iframstate validations to avoid assertio…
An update that fixes one vulnerability is now available.
An update that fixes 6 vulnerabilities is now available.
