Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume…
At some point your security will fail. This isn’t pessimism. It’s not because your team and tools aren’t sophisticated enough. It’s the reason we have detectio…
This release fixes CVE-2026-111253 (dnf5daemon-server: missing session-owner check allows foreign D-Bus callers to replace another client's resolved transactio…
This release rejects YAML files which decompress to much (CVE-2026-92823), rejects YAML documents with YAML tree deeper than 64 (CVE-2026-92822), fixes iterati…
This release rejects YAML files which decompress to much (CVE-2026-92823), rejects YAML documents with YAML tree deeper than 64 (CVE-2026-92822), fixes iterati…
A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not th…
A browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person's computer, researchers at Forever Security, an endpoint s…
A flaw in APT, the tool that installs software on Debian and Ubuntu, could let an attacker replace a package after it passed a security check.
Apple has revealed that it plans to start checking public iCloud links for harmful content starting with iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3. …
Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines have all come forward over the last week to report data b…
A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The atta…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catal…
A maximum-severity security flaw impacting Siemens SIMATIC IoT2050 Advanced devices has come under active exploitation, VulnCheck has revealed. The vulnerabili…
Update cargo-semver-checks to 0.51.0, with support for variadic function signatures, and build it with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347,…
Update cargo-semver-checks to 0.51.0, with support for variadic function signatures, and build it with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347,…
Update cargo-semver-checks to 0.51.0, with support for variadic function signatures, and build it with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347,…
Update cargo-semver-checks to 0.51.0, with support for variadic function signatures, and build it with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347,…
Update cargo-semver-checks to 0.51.0, with support for variadic function signatures, and build it with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347,…
Update cargo-semver-checks to 0.51.0, with support for variadic function signatures, and build it with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347,…
The Investigatory Powers Commissioner’s Office (IPCO) in its annual report for 2025, published Thursday, said it was “very concerned” and “disappointed with th…
The alert is critical. The fix is known. And the ticket sits in a queue for days. Security teams understand the risk, but the people who keep applications avai…
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, sandbox breakout, incomplete certificate check…
Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli…
