Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
xkb: Check the keysym range in _XkbReadKeyActions (CVE-2026-88806)
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which could result in denial of service, information disclosure or po…
Multiple vulnerabilities were discovered in Glance, OpenStack's image storage service. CVE-2026-71196, CVE-2026-71197 and CVE-2026-71198 / OSSA-2026-038 Three …
Attackers are exploiting a critical Cisco ISE flaw that can open the product’s web management interface without a valid login. Cisco disclosed CVE-2026-76460 o…
Oracle Linux 9 has released security updates for various RPM packages including mecab, mysql, and rapidjson, addressing multiple CVEs and improving system stab…
Oracle Linux 8 has released updated RPMs addressing vulnerabilities, including CVE-2026-64496, with changes to kernel modules, security keys, and various tool …
Oracle Linux 9 has received an update with kernel and related RPMs addressing security issues, including CVE-2025-68214, and introduces changes to UKI signing …
Fedora 44 introduces the tcpreplay tool for replaying captured network traffic, now at version 4.6.0, with added features including tcpprep and capinfo for per…
Fedora 44 has updated NextCloud to version 34.0.2, offering file syncing and sharing, with improvements and bug fixes related to security flaws and enhancement…
An update for openSUSE Tumbleweed addresses a vulnerability in kubernetes1.35-apiserver-1.35.7-1.1, enhancing security with the installation of the updated pac…
openSUSE Tumbleweed has released an update for kubernetes1.34-apiserver addressing a moderate security vulnerability, identified as CVE-2020-8561, affecting va…
A new report from INTERPOL has revealed a "dramatic increase" in cybercrime in Asia and the South Pacific, fueled by rapid digitalization, internet penetration…
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in incorrect generation of cryptographic keys, denial of service, in…
Microsoft has warned of fresh campaigns that are capitalizing on the upcoming tax season in the U.S. to harvest credentials and deliver malware.The email campa…
Coturn 4.9.0 Multiple security fixes Fix to Web Admin password check Cleanup of deprecated OpenSSL APIs Fix for CVE-2026-27624: Bypass localhost and IP range b…
Update to 144.0.7559.109 * CVE-2026-1504: Inappropriate implementation in Background Fetch API
libphp-adodb, a class library that provides abstractions for performing queries and managing databases, was affected by a vulnerability. Improper escaping of a…
Update to version 0.4.11. This version includes a fix for CVE-2025-55159, but there are zero packages in Fedora or EPEL that use the affected API, so no rebuil…
An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If…
Arbitrary file include in Carbon::setLocale has been fixed in Carbon, a PHP API extension for DateTime. For Debian 11 bullseye, this problem has been fixed in …
PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation. (CVE-2025-1094) References: - https://bugs.mageia.org/show_bug…
Update to 133.0.6943.53 CVE-2025-0444: Use after free in Skia CVE-2025-0445: Use after free in V8 CVE-2025-0451: Inappropriate implementation in Extensions API
Update to 133.0.6943.53 CVE-2025-0444: Use after free in Skia CVE-2025-0445: Use after free in V8 CVE-2025-0451: Inappropriate implementation in Extensions API
As many as six security vulnerabilities have been disclosed in the popular Rsync file-synchronizing tool for Unix systems, some of which could be exploited to …
