Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes four vulnerabilities is now available.
An update that fixes one vulnerability is now available.
Cybersecurity researchers have discovered two new malicious packages on the npm registry that make use of smart contracts for the Ethereum blockchain to carry …
Google has shipped security updates to address 120 security flaws in its Android operating system as part of its monthly fixes for September 2025, including tw…
CVE-2025-58068 Eventlet is a concurrent networking library for Python. Eventlet WSGI parser is vulnerable to HTTP Request Smuggling due to improper handling of…
The threat actor known as Silver Fox has been attributed to abuse of a previously unknown vulnerable driver associated with WatchDog Anti-malware as part of a …
An update that fixes one vulnerability is now available.
Multiple vulnerabilities were discovered in Node.js, which could result in denial of service, HTTP request smuggling, privilege escalation, a side channel atta…
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that solves two vulnerabilities and has one errata is now available.
Python 3.13.7 is the seventh maintenance release of 3.13. 3.13.7 is an expedited release to fix a significant issue with the 3.13.6 release: gh-137583: Regress…
An update that fixes one vulnerability is now available.
An update that fixes two vulnerabilities is now available.
An update that fixes one vulnerability is now available.
Security fixes Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787 Bumped the minimum github.com/NV…
CVE-2023-46604 is not just another box on your patching to-do list''it's a major remote code execution (RCE) vulnerability in Apache ActiveMQ that admins need …
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
After two decades of developing increasingly mature security architectures, organizations are running up against a hard truth: tools and technologies alone are…
Managing CPU security mitigations has always been one of those balancing acts that systems administrators live and breathe but rarely get applause for. After a…
Managing CPU security mitigations has always been one of those balancing acts that systems administrators live and breathe but rarely get applause for. After a…
An update that fixes 5 vulnerabilities is now available.
An update that fixes 5 vulnerabilities is now available.
Cybersecurity researchers have disclosed a new Android trojan called PhantomCard that abuses near-field communication (NFC) to conduct relay attacks for facili…
