Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A critical security update for SUSE Linux Enterprise 15 SP7 addresses CVE-2026-53366, improving protection against vulnerability related to IPv4 fragmentation.…
An administrator reports unusual outbound traffic from a Linux server after firewall logs show repeated connections to an unfamiliar external IP address. Nothi…
For decades, Linux defenders relied on a comfortable assumption: a public security patch did not imply an imminent vulnerability. While open-source openness ma…
A vulnerability in Roc Toolkit allows potential crashes or arbitrary code execution through malformed WAV files, affecting Ubuntu 26.04 LTS users; an update is…
The China-linked cybercrime group behind the use of income tax-related phishing lures targeting Indian taxpayers, tax professionals, and corporate finance team…
A security update for the kernel-rt on Rocky Linux 8 addresses vulnerabilities, including potential I/O checks and memory issues, requiring attention to ensure…
An update for ffmpeg on openSUSE Tumbleweed addresses two vulnerabilities, providing fixes for security issues rated moderate, with specific CVEs and CVSS scor…
The google-osconfig-agent-20260708.00-3.1 update for openSUSE Tumbleweed addresses a vulnerability identified as CVE-2026-56852, rated as moderate with CVSS sc…
Fedora 44 has updated the rust-libgit2-sys package to version 0.18.7, addressing several security vulnerabilities while maintaining compatibility with system P…
An update for the python313-urwid package on openSUSE Tumbleweed addresses a moderate security vulnerability, CVE-2026-9323, enhancing system protection.
Fedora has released a notification for updating the lego package to version 5.3.1, an ACME client in Go, addressing issue rhbz#2504092 and related security con…
Fedora 44 has released Traffic Server 10.1.3, enhancing performance and resolving security vulnerabilities, including a DoS issue in HTTP/2 and various other b…
WordPress 6.9.5 and 7.0.2 fix wp2shell, a core REST API bug chaining route confusion and SQL injection into unauthenticated remote code execution.wp2shell: Wor…
A heap-based buffer overflow in 7-Zip's XZ decoder, patched in version 26.02, let a crafted archive run code on extraction and had gone unnoticed for five year…
An AI-driven threat actor called JADEPUFFER built ransomware that hunts AI model files specifically, entering through a known Langflow RCE and pivoting via an …
A new version of python-idna (3.18) has been released in Fedora 43, fixing vulnerabilities CVE-2026-45409 and CVE-2024-3651, while supporting updated IDNA prot…
Mageia released updated wget packages addressing multiple security vulnerabilities, including denial of service and potential arbitrary code execution, affecti…
Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applica…
The Fedora 43 update for python-django5 to version 5.2.16 addresses three low-severity CVEs, enhancing security by fixing issues related to data exposure and p…
A Fedora update for wget1 addresses multiple vulnerabilities, including a server-side request forgery and buffer overflow, improving the security of file retri…
Fedora has released an update for Netatalk version 4.5.1, introducing security fixes and improvements to the Apple Filing Protocol file server software and its…
Mageia has released updates for versions 10 and 9 addressing multiple security vulnerabilities, identified by several CVEs, to enhance system protection and re…
openSUSE has released a security update for the gh package to address a significant vulnerability (CVE-2026-39821) and includes a bug fix for affected products…
SUSE has released a security update for avahi to address CVE-2025-59529, which allows local denial of service due to a client limit issue in the protocol serve…
