Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a m…
LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threa…
Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to computers it did not own to switch off a backg…
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The acti…
American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its …
An update that fixes three vulnerabilities is now available.
Nationwide lab test company Quest Diagnostics said one of its key systems may have experienced a breach of patient data.
An update that solves 16 vulnerabilities, contains one feature and has two security fixes can now be installed.
An update that solves 16 vulnerabilities, contains one feature and has two security fixes can now be installed.
An update that solves one vulnerability, contains one feature and has three fixes can now be installed.
New kernel packages are available for Slackware 15.0 to fix security issues.
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses an…
eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came fiv…
A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL machine when the developer signed…
Law enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, which targeted bus…
An update that solves one vulnerability and contains one feature can now be installed.
An update that fixes 10 vulnerabilities is now available.
Unknown threat actors breached TeamUpdraft's website and potentially gained unauthorized access to customers' connection keys for UpdraftCentral, UpdraftVault,…
U.S. federal civilian agencies must remove DeepSeek products from their information technology systems, along with any third-party products or services "develo…
x86/AMD: ineffectual Zenbleed workaround [XSA-515, CVE-2026-79608] x86: XPTI may break on huge-memory systems [XSA-516, CVE-2026-79609] grant-table: double ver…
New python-certifi packages are available for Slackware 15.0 and -current to fix a security issue.
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix a security issue.
New mozilla-nss packages are available for Slackware 15.0 and -current to fix a security issue.
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix a security issue.
