Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A newly disclosed high-severity security flaw impacting OttoKit (formerly SureTriggers) has come under active exploitation within a few hours of public disclos…
A vulnerability, which was classified as problematic, was found in radare2. Affected is an unknown function in the library /libr/main/rasm2.c of the component …
Recent vulnerabilities in BeyondTrust Remote Support ( CVE-2024-12356 ) and PostgreSQL ( CVE-2025-1094 ) are being actively exploited by threat actors and requ…
The updated packages fix security vulnerabilities: Use-after-free in xmlSchemaIDCFillNodeTables. (CVE-2024-56171) Stack-buffer-overflow in xmlSnprintfElements.…
Recent vulnerabilities in BeyondTrust Remote Support ( CVE-2024-12356 ) and PostgreSQL ( CVE-2025-1094 ) are being actively exploited by threat actors and requ…
An update that fixes three vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
Citrix has released security updates for a high-severity security flaw impacting NetScaler Console (formerly NetScaler ADM) and NetScaler Agent that could lead…
Multiple Russia-aligned threat actors have been observed targeting individuals of interest via the privacy-focused messaging app Signal to gain unauthorized ac…
Multiple vulnerabilities have been found in OpenSSH, the worst of which could allow a remote attacker to gain unauthorized access.
An update that solves 58 vulnerabilities and has 33 fixes is now available.
Cryptography vulnerable to NULL-dereference when loading PKCS7 certificates. (CVE-2023-49083) Python-cryptography: bleichenbacher timing oracle attack against …
A buffer overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ff_bwdif_filter_intra_c function in th…
PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation. (CVE-2025-1094) References: - https://bugs.mageia.org/show_bug…
Recently, the Cybersecurity and Infrastructure Security Agency (CISA) issued a dire warning regarding an out-of-bounds write vulnerability in the Linux kernel …
Threat hunters have shed light on a new campaign targeting the foreign ministry of an unnamed South American nation with bespoke malware capable of granting re…
Remote Code Execution in pypa/setuptools. (CVE-2024-6345) References: - https://bugs.mageia.org/show_bug.cgi?id=33536 - https://lists.suse.com/pipermail/sle-up…
Despite the fix being available, the delays in patching devices allowed the threat actors to…CISA Warns Of Actively Exploited Vulnerability In Microsoft Outloo…
Bing Shi reported a flaw in Libtasn1, a library to manage ASN.1 structures. Inefficient processing of input DER data containing a large number of SEQUENCE OF o…
In a startling revelation, researchers have uncovered a critical vulnerability in the Linux kernel that has remained undetected for seven years, posing a signi…
In a startling revelation, researchers have uncovered a critical vulnerability in the Linux kernel that has remained undetected for seven years, posing a signi…
In cybersecurity, the smallest crack can lead to the biggest breaches. A leaked encryption key, an unpatched software bug, or an abandoned cloud storage bucket…
Zimbra has released software updates to address critical security flaws in its Collaboration software that, if successfully exploited, could result in informat…
An update that fixes 8 vulnerabilities is now available.
