Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
In 2025, the CISO’s job isn’t just about stopping breaches—it’s about enabling business without compromising security. Whether it’s remote access to Linux serv…
Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execu…
Resolve CVE-2025-7039 (Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file()) with several other bug fixes.
DEFCON isn't your average tech conference. It's not about launching flashy products or corporate handshakes''it's about putting reality under a microscope and …
Multiple vulnerabilities have been addressed in Apache, a widely used web server. Please note that the fix for CVE-2025-23048, included in this DLA,
Let's talk about CVE-2025-38236 . If you've been following the Linux kernel's security track record, you already know how hard developers work to keep it solid…
upgrade to 1.19.12 Mitigating remote code execution vulnerabilities using systemd sandboxing features.
The Evolution of Exposure ManagementMost security teams have a good sense of what’s critical in their environment. What’s harder to pin down is what’s business…
Cybercriminals these days use various tactics to lure you and steal your sensitive information. Phishing emails are one of them. Hackers inject malicious code …
A newly discovered campaign dubbed GreedyBear has leveraged over 150 malicious extensions to the Firefox marketplace that are designed to impersonate popular c…
Now that we are well into 2025, cloud attacks are evolving faster than ever and artificial intelligence (AI) is both a weapon and a shield. As AI rapidly chang…
Imagine this: You're a developer, working on your local machine, crunching out APIs, or perhaps debugging your ambitious NestJS-powered application. Harmless, …
Reportedly, Anthropic has restricted OpenAI from accessing the Claude API after noticing an apparent breach…Anthropic Restrict Claude API Access To OpenAI Engi…
When Technology Resets the Playing FieldIn 2015 I founded a cybersecurity testing software company with the belief that automated penetration testing was not o…
This update, to the current upstream release version, includes a fix to source random numbers using the Crypt::URandom module rather than trying to read /dev/u…
This update, to the current upstream release version, includes a fix to source random numbers using the Crypt::URandom module rather than trying to read /dev/u…
Google has released security updates to address multiple security flaws in Android, including fixes for two Qualcomm bugs that were flagged as actively exploit…
Cybersecurity researchers have disclosed a high-severity security flaw in the artificial intelligence (AI)-powered code editor Cursor that could result in remo…
If you're managing Linux systems, you already know how quickly things can spiral when Linux vulnerabilities are left unchecked. But there's one particularly na…
Alright, let's talk Plague . If you're a Linux admin or someone knee-deep in securing systems, this little beast of a backdoor should have your full attention.…
Telecommunications organizations in Southeast Asia have been targeted by a state-sponsored threat actor known as CL-STA-0969 to facilitate remote control over …
If you're running servers, maintaining web apps, or just spending a lot of time thinking about the integrity of systems, cross-site scripting (or XSS) probably…
Imagine this: you're midway through deploying critical patches on your Linux servers when you notice something strange. Traffic to one of your services spikes …
It was discovered that there was a potential HTTP Parameter Pollution (HPP) issue in node-form-data, a tool to create multipart/form-data streams module in Nod…
