Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Open Source Intelligence (OSINT) is the practice of collecting information from published or publicly available sources for intelligence purposes.
Cybersecurity researchers have discovered two new malicious packages on the npm registry that make use of smart contracts for the Ethereum blockchain to carry …
Google has shipped security updates to address 120 security flaws in its Android operating system as part of its monthly fixes for September 2025, including tw…
The North Korea-linked threat actor known as the Lazarus Group has been attributed to a social engineering campaign that distributes three different pieces of …
CVE-2025-58068 Eventlet is a concurrent networking library for Python. Eventlet WSGI parser is vulnerable to HTTP Request Smuggling due to improper handling of…
The threat actor known as Silver Fox has been attributed to abuse of a previously unknown vulnerable driver associated with WatchDog Anti-malware as part of a …
Cybersecurity researchers have discovered a new phishing campaign undertaken by the North Korea-linked hacking group called ScarCruft (aka APT37) to deliver a …
New udisks2 packages are available for Slackware 15.0 and -current to fix a security issue.
An update that fixes one vulnerability is now available.
Multiple vulnerabilities were discovered in Node.js, which could result in denial of service, HTTP request smuggling, privilege escalation, a side channel atta…
Cybersecurity researchers have discovered a cybercrime campaign that's using malvertising tricks to direct victims to fraudulent sites to deliver a new informa…
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that solves two vulnerabilities and has one errata is now available.
Cybersecurity researchers have discovered a new variant of an Android banking trojan called HOOK that features ransomware-style overlay screens to display exto…
Google has announced plans to begin verifying the identity of all developers who distribute apps on Android, even for those who distribute their software outsi…
Python 3.13.7 is the seventh maintenance release of 3.13. 3.13.7 is an expedited release to fix a significant issue with the 3.13.6 release: gh-137583: Regress…
Python 3.13.7 is the seventh maintenance release of 3.13. 3.13.7 is an expedited release to fix a significant issue with the 3.13.6 release: gh-137583: Regress…
An update that fixes one vulnerability is now available.
An update that fixes two vulnerabilities is now available.
If you've tried pulling files from Arch's main site, hit the AUR, or popped into their forums recently, then you've probably noticed things are off. Maybe you …
An update that fixes one vulnerability is now available.
Cybersecurity researchers have discovered a malicious Go module that presents itself as a brute-force tool for SSH but actually contains functionality to discr…
Security fixes Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787 Bumped the minimum github.com/NV…
