Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Fedora has released an update for calibre, version 9.13.0, enhancing its e-book management features and addressing several vulnerabilities including potential …
Code merged for the Linux 7.3 development cycle changes the measured boot evidence produced by the Integrity Measurement Architecture, or IMA. The kernel now r…
Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boot-time remediation driver to perform arbitrary kernel-…
Ubuntu addressed security vulnerabilities in Cap'n Proto affecting multiple LTS versions, which could allow HTTP request or response smuggling. Users should up…
Ubuntu Security Notice USN-8644-1 details fixes for several vulnerabilities in the Linux kernel affecting Ubuntu 18.04 LTS and 16.04 LTS, requiring users to up…
Ubuntu has resolved multiple security vulnerabilities in c3p0, a JDBC connection pooling library, affecting various LTS versions, potentially allowing remote c…
Fedora 44 has released an update for Coturn 4.17.2, addressing security fixes and various improvements, including protocol enhancements, changes in log formatt…
A significant security update for dracut on Rocky Linux 9 addresses a vulnerability allowing root code execution via unescaped error messages, impacting system…
Oracle Linux Security Advisory ELSA-2026-54512 announces the update of gnome-remote-desktop for Oracle Linux 10, addressing CVE-2026-18358 by backporting conne…
Gentoo Linux has issued a high-severity advisory for multiple vulnerabilities in Dnsmasq, including potential remote code execution, urging users to upgrade to…
An important security update for FreeRDP on Rocky Linux 10 addresses a critical remote code execution vulnerability (CVE-2026-55827), impacting the safety of r…
A Storm-2945 campaign layers device code phishing onto hijacked hotel Wi-Fi to bypass MFA on Microsoft 365 accounts. Here's how it works and how to shut it off…
Fedora 43 has updated coturn to version 4.15.0, introducing security fixes, new features for mobility handoff, improved logging, and better client utilities fo…
A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can capture webcam images, microph…
Oracle Linux has released updated OpenSSH packages for version 10, addressing multiple CVEs related to security vulnerabilities, including remote-to-remote cop…
Fedora 44 has released an update for libssh to version 0.12.2, enhancing SSH protocol implementation for programmers, enabling remote execution, file transfer,…
Fedora released an update for WordPress 6.9.5, addressing critical security vulnerabilities including SQL injection issues and potential remote code execution …
The Fedora update for nginx-mod-brotli version 1.0.0~rc-13 includes a rebuild for nginx version 1.30.4, addressing various CVEs and improving Brotli compressio…
Ubuntu released a security notice addressing vulnerabilities in the Linux kernel affecting versions 20.04 and 18.04, necessitating system updates and potential…
A security update addresses three vulnerabilities in jackson libraries affecting SUSE Linux Enterprise Server versions 16.0, enhancing protection from potentia…
ESET found 11 Microsoft-signed UEFI shims, some over a decade old, that let attackers bypass Secure Boot without a single new exploit.11 Old Signed UEFI Shims …
A 41-year-old former ransomware negotiator has been sentenced to nearly six years (i.e., 70 months) in prison in the U.S. for their role in conspiring with the…
A streaming box should not need a threat model. Neither should a username field, a demo repo, a reset flow, or a browser permission prompt. That is the irritat…
A newly disclosed use-after-free in the Linux kernel's epoll code, CVE-2026-46242, lets an unprivileged user get root on affected Linux and Android systems. A …
