Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Oracle Linux 8 has released updated RPMs addressing vulnerabilities, including CVE-2026-64496, with changes to kernel modules, security keys, and various tool …
Ubuntu Security Notice USN-8529-2 reveals multiple vulnerability fixes in the Linux kernel affecting Ubuntu 16.04 LTS, with local attackers potentially escalat…
Fedora 44 has released an update for libidn version 1.44, addressing a security flaw (CVE-2026-57053) related to out-of-bounds reads in ToUnicode APIs.
A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets, source code, and customer data without eve…
Fedora has released an update for mingw-libidn to version 1.44, addressing a CVE related to out-of-bounds reads in ToUnicode APIs, available through the dnf up…
Oracle Linux 9 has received an update with kernel and related RPMs addressing security issues, including CVE-2025-68214, and introduces changes to UKI signing …
Fedora 44 introduces the tcpreplay tool for replaying captured network traffic, now at version 4.6.0, with added features including tcpprep and capinfo for per…
Oracle Linux 8 has received an important security update with new RPMs addressing multiple CVEs, improving kernel capabilities, and updating signing keys for e…
Two security flaws in Paperclip could let attackers execute commands on a network server or a developer's computer. Paperclip is an open-source control plane f…
A new Fedora update for doctl version 1.164.0 addresses various security vulnerabilities including denial of service and unauthorized command execution in the …
CVE-2026-16232 lets an unauthenticated attacker seize full admin control of Check Point's management console. Check Point confirms in-the-wild attacks, and a R…
A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can capture webcam images, microph…
Fedora 44 has updated NextCloud to version 34.0.2, offering file syncing and sharing, with improvements and bug fixes related to security flaws and enhancement…
Oracle Linux 9 updates include a new kernel version with several security fixes related to various CVEs, alongside modifications to signing keys and certificat…
An update for openSUSE Tumbleweed addresses a vulnerability in kubernetes1.35-apiserver-1.35.7-1.1, enhancing security with the installation of the updated pac…
openSUSE Tumbleweed has released an update for kubernetes1.34-apiserver addressing a moderate security vulnerability, identified as CVE-2020-8561, affecting va…
A security update for python-urllib3 addresses CVE-2026-9375, a vulnerability that can cause a denial of service due to a decompression bomb bypass in the stre…
Fedora 44's kronosnet update addresses vulnerabilities including memory exposure of encryption keys, access control bypass, and memory corruption, enhancing se…
WordPress 6.9.5 and 7.0.2 fix wp2shell, a core REST API bug chaining route confusion and SQL injection into unauthenticated remote code execution.wp2shell: Wor…
Fedora 43 released an update for perl-DBI version 1.651, addressing multiple security vulnerabilities including CVE-2026-15043 and others, improving database A…
1.34.7 accidentally broke the API compatibility, this is fixed in 1.34.8. update to 1.34.7 fixes CVE-2026-33630 (GHSA-6wfj-rwm7-3542) and GHSA-pjmc-gx33-gc76 a…
A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure templates, filename-spoofing tests, …
A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions and smuggling out …
import asyncssh 2.23.1 Fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape Fix CVE-2026-54591: Arbitrary file write via pat…
