Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Apple on Tuesday released its first round of Background Security Improvements to address a security flaw in WebKit that affects iOS, iPadOS, and macOS.The vuln…
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-14174 Apple and the Google Threat Analysis Group discovered that proce…
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-13947 Janet Black discovered that a website may be able to exfiltrate …
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-43272 Big Bear discovered that processing maliciously crafted web cont…
Apple on Thursdayrolled out security updatesto iOS, iPadOS, macOS, tvOS, watchOS, and the Safari web browser to address dozens of flaws, including three new ze…
An integer overflow vulnerability exists in golang-websocket, a Go package implementing the WebSocket protocol connection. An attacker would use this flaw to c…
Researchers have found a serious code execution vulnerability in the web-based groupware Horde Webmail. Exploiting…Serious RCE Vulnerability In Horde Webmail T…
Researchers have discovered a severe supply-chain attack that plants web skimmers on real-estate websites via…Hackers Exploit Cloud Video Platform To Target Re…
CloudLinux's security platform for Linux-based websites and web servers contains a high-severity PHP deserialization bug, leaving web servers vulnerable to cod…
Hackers are exploiting various websites to conduct phishing attacks. These websites redirect users to fake sites prompting a malicious ChromeMany Users Hacked …
The 'send_email' function in graphite-web/webapp/graphite/composer/views.py in Graphite is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an a…
Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox i…
openSUSE has released a security update for webkit2gtk3 addressing 23 vulnerabilities, including memory corruption and web content processing issues, affecting…
A security update for webkit2gtk3 addresses 23 vulnerabilities affecting multiple SUSE and openSUSE versions, improving the handling of web content and prevent…
Fedora 44 has released libwebsockets version 4.5.8, a lightweight C library for Websockets, which includes important updates and fixes for recent vulnerabiliti…
Apple on Wednesday backported fixes for a security flaw in iOS, iPadOS, and macOS Sonoma to older versions after it was found to be used as part of the Coruna …
Apple on Friday released security updates for iOS, iPadOS, macOS, tvOS, watchOS, visionOS, and its Safari web browser to address two security flaws that it sai…
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-43392
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-43272
Fortinet has warned of a new security flaw in FortiWeb that it said has been exploited in the wild.The medium-severity vulnerability, tracked as CVE-2025-58034…
Google's artificial intelligence (AI)-powered cybersecurity agent called Big Sleep has been credited by Apple for discovering as many as five different securit…
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-6558
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-6558
Update to 2.48.5. Changes since 2.48.3: Improve emoji font selection. Improve playback of multimedia streams from blob URLs. Fix crash when using a WebKitWebVi…
