Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to upstream (bz#2453492). check_icmp: host-count overflow leads to heap buffer overflow (bz#2513957) Update 0012-fix-perl-ntp-ipv6.patch to allow upperc…
Update to upstream (bz#2453492). check_icmp: host-count overflow leads to heap buffer overflow (bz#2513957) Update 0012-fix-perl-ntp-ipv6.patch to allow upperc…
Listing network routes should tell administrators where traffic will go. An IPv6 security report instead shows Linux accessing a freed record used to keep trac…
Malware linked to break-ins at F5 BIG-IP Access Policy Manager appliances hides a PHP web shell in memory instead of in a file on disk, Sophos said in an analy…
Suppose an application setting has changed on a Linux server, but nobody remembers changing it. The application still works, and the usual health checks show n…
Linux interrupt maintainer Thomas Gleixner traced a Kernel Address Sanitizer report to incomplete regmap IRQ cleanup on Aug 30, 2026. The crash appeared while …
A Linux security hook should be able to check a task without invalidating the identity data that surrounding kernel code is still using. AppArmor broke that ex…
Debian has addressed multiple security vulnerabilities in libvncserver, including out-of-bounds reads and null pointer dereferences, recommending users upgrade…
Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead drop resolvers (DDRs) to deliver two previously unreported r…
Oracle Linux 8 has released updated NetworkManager RPMs addressing CVE-2026-10805 with various changes, including permission adjustments, enhancements for DAD_…
A security update for 389-ds addresses three vulnerabilities affecting various SUSE Linux products, fixing issues related to integer overflow, token handling, …
eBPF security is often summarized in one sentence: Linux loads an eBPF program only after the kernel verifier accepts it under the safety checks the verifier p…
Researchers at the University of Massachusetts Amherst have demonstrated an attack that revives expired Visa contactless credit cards for real in-store purchas…
A vulnerability in libssh affecting Ubuntu 26.04 LTS could lead to crashes or unexpected behavior due to improper bounds checking, fixed in the latest update.
Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence (AI) platform, and FUXA, an open-source, web-based SCADA / HMI software b…
A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to victim organizations and claims to delete stolen data from …
Oracle Linux has released security updates for HAProxy, addressing CVEs 2026-55203 and 2026-55204, which fix a NULL pointer dereference and a uint16_t overflow…
Oracle Linux 9 has updated RPMs addressing security vulnerabilities related to LDAP filter injections, NULL pointer dereferences, and stack buffer overflows in…
SUSE announced a moderate security update for texlive addressing three vulnerabilities, including NULL pointer dereferences and a use-after-free issue, applica…
An update for the libgsasl library in Fedora 44 addresses CVE-2026-48829, which involved a denial of service vulnerability through a NULL pointer dereference i…
Fedora has released an update for libgsasl to fix CVE-2026-48829, addressing a denial of service vulnerability related to NULL pointer dereference in the DIGES…
A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts.The vulnerability, tracked as CVE-2026-58231, …
A step-by-step method for finding and proving CORS misconfiguration vulnerabilities: the header checks, the edge cases developers miss, and how to fix them.How…
SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution.…
