Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
KMail Account Wizard uses an insecure protocol.
Cyber threats and attacks like ransomware continue to increase in volume and complexity with the endpoint typically being the most sought after and valued targ…
A vulnerability has been discovered in python-h2, a Python HTTP/2 protocol implementation. CVE-2025-57804
Cybersecurity researchers have discovered a malicious npm package that comes with stealthy features to inject malicious code into desktop apps for cryptocurren…
As enterprises continue to shift their operations to the browser, security teams face a growing set of cyber challenges. In fact, over 80% of security incident…
Generative AI platforms like ChatGPT, Gemini, Copilot, and Claude are increasingly common in organizations. While these solutions improve efficiency across tas…
The maintainers of the nx build system have alerted users to a supply chain attack that allowed attackers to publish malicious versions of the popular npm pack…
Anthropic on Wednesday revealed that it disrupted a sophisticated operation that weaponized its artificial intelligence (AI)-powered chatbot Claude to conduct …
Update to upstream version 0.2.8 Update idna dependency to a version not affected by CVE-2024-12224
Small and medium-sized businesses (SMBs) can’t afford to take a hit when it comes to security. And many SMBs rely on Linux to keep their servers and other appl…
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitr…
Docker has released fixes to address a critical security flaw affecting the Docker Desktop app for Windows and macOS that could potentially allow an attacker t…
If you've tried pulling files from Arch's main site, hit the AUR, or popped into their forums recently, then you've probably noticed things are off. Maybe you …
Security Information and Event Management (SIEM) systems act as the primary tools for detecting suspicious activity in enterprise networks, helping organizatio…
This update removes the usage of the C (Credential) flag for the binfmt_misc registration within the qemu-user package, as it allowed for privilege escalation …
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape …
Rebase due to a lot of CVE fixes
Threat actors are exploiting a nearly two-year-old security flaw in Apache ActiveMQ to gain persistent access to cloud Linux systems and deploy malware called …
After two decades of developing increasingly mature security architectures, organizations are running up against a hard truth: tools and technologies alone are…
Managing CPU security mitigations has always been one of those balancing acts that systems administrators live and breathe but rarely get applause for. After a…
Managing CPU security mitigations has always been one of those balancing acts that systems administrators live and breathe but rarely get applause for. After a…
The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) on Thursday renewed sanctions against Russian cryptocurrency exchange platform Ga…
Ever wonder how a seemingly minor bug in memory management can crack open a door for attackers to slip through? Meet the use-after-free (UAF) vulnerability''an…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added two security flaws impacting N-able N-central to its Known Exploited Vulner…
