Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The fix for CVE-2026-32316 in 1.6-2.1+deb12u2 stopped one string from growing past its limit, but repeating a string with * could still keep appending. A repea…
Joe Tidy reports: German police have detained a Russian man accused of being part of a cyber-crime gang which caused chaos at London hospitals and contributed …
WordPress 6.9.10 Security Release Security updates included in this release A stored XSS on the Comments administration page, exploitable via pending comments,…
WordPress 6.9.10 Security Release Security updates included in this release A stored XSS on the Comments administration page, exploitable via pending comments,…
An update that fixes 37 vulnerabilities is now available.
Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11…
An update that solves 229 vulnerabilities, contains one feature and has five security fixes can now be installed.
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstra…
It was discovered that incorrect parsing of Content-Type headers in the Mutt mail user agent could result in denial of service or potentially the execution of …
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network.…
An update that contains one feature can now be installed.
Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed n…
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent S…
An update that solves 86 vulnerabilities, contains 10 features and has two security fixes can now be installed.
An update that solves 110 vulnerabilities, contains 10 features and has seven security fixes can now be installed.
An update that solves 110 vulnerabilities, contains 10 features and has seven security fixes can now be installed.
Guru Baran reports: Ransomware gangs are moving beyond locked files and stolen data. Criminals now threaten employees, executives, and their families to force …
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal…
A data governance framework defines who is responsible for information, how it may be used, and which controls protect its quality and availability. For Linux …
The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, acco…
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows develo…
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells …
An update that solves 110 vulnerabilities, contains 10 features and has seven security fixes can now be installed.
An update that solves 110 vulnerabilities, contains 10 features and has seven security fixes can now be installed.
