Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Linux maintainers are testing a patch for a page-cache bug after KASAN reproduced a use-after-free in filemap_map_pages(). On Sep 3, 2026, Andrew Morton said h…
Vulnerability management has been a staple of security programs since the dawn of the cybersecurity discipline. The symbiotic relationship between vulnerabilit…
openSUSE released a security update for apptainer addressing a vulnerability related to file extraction that could overwrite files outside designated directori…
A new update for the containerized-data-importer1.66-api package in openSUSE Tumbleweed addresses twelve vulnerabilities, enhancing security for affected users.
An update for kubevirt1.9-container-disk on openSUSE Tumbleweed addresses 10 security vulnerabilities, improving system security with various package installat…
SUSE released a moderate security update for containerd addressing CVE-2026-35469, which fixes a memory amplification vulnerability that could cause a denial o…
A security update for containerd addresses four vulnerabilities, including a significant denial of service risk, affecting various SUSE Linux Enterprise produc…
SUSE has released a security update for apptainer addressing two vulnerabilities, CVE-2026-39821 and CVE-2026-56852, affecting multiple SUSE products, with ins…
A security update for apptainer addresses two vulnerabilities, fixing issues with privilege escalation and handling invalid UTF-8 input, applicable to several …
An important security update for openSUSE Leap 16.0 addresses two vulnerabilities in apptainer, improving functionality and fixing issues related to file owner…
Anthropic says Claude Mythos Preview helped derive an end-to-end key-recovery attack against HAWK-256 and a 200- to 800-fold speedup for an attack on seven-rou…
SUSE released an important security update for python-aiohttp, addressing eight vulnerabilities that may lead to resource exhaustion, DoS attacks, and cookie h…
SUSE has released a security update for containerd addressing four vulnerabilities, including a denial of service issue in SPDY frame parsing for SUSE Linux Mi…
For decades, Linux defenders relied on a comfortable assumption: a public security patch did not imply an imminent vulnerability. While open-source openness ma…
Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applica…
SUSE released a security update for python-aiohttp addressing 19 vulnerabilities, including memory usage issues and denial of service risks across multiple SUS…
Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code e…
Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer's computer. The …
mailcap could allow applications to escape sandbox restrictions
Adobe frames the fast exploitation of its ColdFusion vulnerabilities as an attacker speed problem. The real issue is a connector that never should have trusted…
A practitioner's breakdown of the CSRF attack: how the forged request works, two documented exploits, a manual test, and the fixes that hold up.CSRF Attack Exp…
Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vulnerability to obtain initial …
Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent.Its Threat Research Team calls t…
Important: container-tools:rhel8 security, bug fix, and enhancement update
