Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Release notes for xrdp v0.10.5 (2026/01/27) Security fixes CVE-2025-68670: Improper bounds checking of domain string length leads to Stack- based Buffer Overfl…
Release notes for xrdp v0.10.5 (2026/01/27) Security fixes CVE-2025-68670: Improper bounds checking of domain string length leads to Stack- based Buffer Overfl…
Linux security is not about stacking tools and hoping for the best. It comes down to deliberate configuration, steady maintenance, and systems that can withsta…
A new, critical security vulnerability has been disclosed in the n8n workflow automation platform that, if successfully exploited, could result in the executio…
Cybersecurity researchers have disclosed details of an active web traffic hijacking campaign that has targeted NGINX installations and management panels like B…
Most of us don't decide to deploy AppArmor. We inherit it. It's already enabled on the system, already loaded at boot, and already assumed to be doing somethin…
Threat hunters have disclosed details of a new, stealthy malware campaign dubbed DEAD#VAX that employs a mix of "disciplined tradecraft and clever abuse of leg…
This update provides new upstream snapshots of openQA and os-autoinst, with various fixes and enhancements. Please see upstream changelogs for details. They al…
Recent major cloud service outages have been hard to miss. High-profile incidents affecting providers such as AWS, Azure, and Cloudflare have disrupted large p…
xrdp is an open source RDP server. It was found that xrdp contains an unauthenticated stack-based buffer overflow vulnerability. The issue stems from improper …
This is an upstream bugfix and security update. Please refer to the upstream release notes for details about the changes in this version.
An intrusion detection system can identify suspicious activity. Once an alert is generated, a decision has to be made. The alert can be logged, escalated, or u…
Seeing the word ''telnet'' on a system tends to trigger a reaction. For some admins, it means risk. For others, it means legacy noise that can be ignored. The …
CERT Polska, the Polish computer emergency response team, revealed that coordinated cyber attacks targeted more than 30 wind and photovoltaic farms, a private …
We've been telling ourselves that Snap apps are sandboxed, signed, and therefore low-risk. Not perfect, but good enough. That assumption has been holding for y…
Let’s be honest: a lot of us gloss over data dashboards, skimming for the “all…How to Actually Read Your Business Data for Better Cybersecurity (Without Going …
The "coordinated" cyber attack targeting multiple sites across the Polish power grid has been attributed with medium confidence to a Russian state-sponsored ha…
The "coordinated" cyber attack targeting multiple sites across the Polish power grid has been attributed with medium confidence to a Russian state-sponsored ha…
This is an upstream bugfix and security update. Please refer to the upstream release notes for details about the changes in this version.
This update fixes multiple vulnerabilities in Imagemagick, which could result in denial of service via MSL scripts or potentially the execution of arbitrary co…
Several issues have been found in zvbi, a Vertical Blanking Interval decoder. CVE-2025-2173 is related to an uninitialized pointer in src/conv.c:: vbi_strndup_…
A new multi-stage phishing campaign has been observed targeting users in Russia with ransomware and a remote access trojan called Amnesia RAT."The attack begin…
The Russian nation-state hacking group known as Sandworm has been attributed to what has been described as the "largest cyber attack" targeting Poland's power …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, ci…
