Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
"Open-source based software solutions provider TurboLinux on Tuesday announced that its server product has been deployed, along with a cluster of IBM Netfinity…
This is a very interesting article about the future of cryptography. David Lammers writes ... "At the Intel Developer Forum, Intel unveiled a copy protection s…
Microsoft today issued a new security advisory warning billions of Windows users of two new critical, unpatched zero-day vulnerabilities that could let hackers…
Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulne…
Update to version 0.10.1. This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in ru…
Update to version 3.15.2. Release notes since 3.13.3: https://aomedia.googlesource.com/aom/+/refs/tags/v3.14.0 https://aomedia.googlesource.com/aom/+/refs/tags…
Update to version 0.10.1. This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in ru…
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers…
Update libheif to 1.23.6 Yet another security and bugfix release, see https://github.com/strukturag/libheif/releases/tag/v1.23.6
Update libheif to 1.23.6 Yet another security and bugfix release, see https://github.com/strukturag/libheif/releases/tag/v1.23.6
NY’s Attorney General and CT’s Attorney General held both a provider and its IT company liable for a data breach. The settlement also includes a corrective act…
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content ma…
The fix for CVE-2026-32316 in 1.6-2.1+deb12u2 stopped one string from growing past its limit, but repeating a string with * could still keep appending. A repea…
Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing …
Update to version 2.1.6. Release notes: https://github.com/syncthing/syncthing/releases/tag/v2.1.4 https://github.com/syncthing/syncthing/releases/tag/v2.1.5 h…
Update to version 2.1.6. Release notes: https://github.com/syncthing/syncthing/releases/tag/v2.1.4 https://github.com/syncthing/syncthing/releases/tag/v2.1.5 h…
OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, including one case where its research …
In today’s reminder of the insider threat, Kim Ji-won reports: A National Health Insurance Service (NHIS) employee was dismissed for illegally selling personal…
In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One mo…
Several vulnerabilities were discovered in gst-plugins-bad1.0, a collection of plugins for the GStreamer multimedia framework. Processing specially crafted med…
The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy …
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August.…
Several vulnerabilities have been discovered in Expat, an XML parsing C library, which could result in denial of service or potentially the execution of arbitr…
The incident, which involved a government contractor, has halted all production of bankruptcy notices.
