Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Roundcube Webmail could be made to expose sensitive information over the network.
Linux isn't exactly famous for keeping things simple, especially when it comes to security. Any admin managing CPU mitigations knows how messy it can get. You'…
Linux isn't exactly famous for keeping things simple, especially when it comes to security. Any admin managing CPU mitigations knows how messy it can get. You'…
Linux isn't exactly famous for keeping things simple, especially when it comes to security. Any admin managing CPU mitigations knows how messy it can get. You'…
Multiple vulnerabilities have been fixed in the email, calendar and contacts client Thunderbird. CVE-2025-5986
Apache HTTP Server 2.4.64 is here, and it's carrying quite a load of security fixes that Linux admins absolutely need to pay attention to. Whether your Apache …
Apache HTTP Server 2.4.64 is here, and it's carrying quite a load of security fixes that Linux admins absolutely need to pay attention to. Whether your Apache …
Cybersecurity researchers have discovered a set of four security flaws in OpenSynergy's BlueSDK Bluetooth stack that, if successfully exploited, could allow re…
In yet another instance of threat actors repurposing legitimate tools for malicious purposes, it has been discovered that hackers are exploiting a popular red …
Cisco has released security updates to address a maximum-severity security flaw in Unified Communications Manager (Unified CM) and Unified Communications Manag…
Linux admins and infosec professionals, let's talk about a sophisticated attack campaign targeting South Korean web servers. Threat actors are leveraging file …
CVE-2025-5262: A double-free could have occurred in vpx_codec_enc_init_multi after a failed allocation when initializing the encoder for WebRTC. This could hav…
CVE-2025-5283: A double-free could have occurred in vpx_codec_enc_init_multi after a failed allocation when initializing the encoder for WebRTC. This could hav…
Two new Chrome vulnerabilities have surfaced, and despite how often we hear about Chrome in the news, these bugs are not the kind we can afford to brush off. B…
FileUpload large number of parts with headers DoS. (CVE-2025-48988) Security constraint bypass for pre/post-resources. (CVE-2025-49125) References: - https://b…
The Canadian Centre for Cyber Security and the U.S. Federal Bureau of Investigation (FBI) have issued an advisory warning of cyber attacks mounted by the China…
Roundcube Webmail could allow remote code execution.
You know how we always preach to secure everything: servers, processes, applications? It turns out that a lot of us missed a serious blind spot hiding in plain…
New xorg-server packages are available for Slackware 15.0 and -current to fix a security issue.
Rebuild against idna 1.0+ for CVE-2024-12224
When people talk about open-source software, it often comes with a certain level of trust''trust in the community, trust in transparent development, and trust …
Microsoft has released patches to fix 67 security flaws, including one zero-day bug in Web Distributed Authoring and Versioning (WebDAV) that it said has come …
Secure Boot has long been advertised as the security boundary that keeps rogue software and untrusted code at bay during system startup. By checking cryptograp…
Kirill Firsov discovered that Roundcube, a skinnable AJAX based webmail solution for IMAP servers, was performing PHP Object deserialization on unvalidated inp…
