Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in the Linux kernel.
A European telecommunications organization is said to have been targeted by a threat actor that aligns with a China-nexus cyber espionage group known as Salt T…
CVE-2025-11371 doesn't target Linux directly. It doesn't need to.
* bsc#1239150 * bsc#1239151 * bsc#1249212 * bsc#1249213 * bsc#1249219
Generative AI has gone from a curiosity to a cornerstone of enterprise productivity in just a few short years. From copilots embedded in office suites to dedic…
In a world where threats are persistent, the modern CISO’s real job isn't just to secure technology—it's to preserve institutional trust and ensure business co…
Cybersecurity is no longer just a technical concern. It has become a business survival priority. A single data breach doesn't only expose data, it can erase ye…
Cybersecurity is no longer just a technical concern. It has become a business survival priority. A single data breach doesn't only expose data, it can erase ye…
An advanced persistent threat (APT) group from China has been attributed to the compromise of a Philippines-based military company using a previously undocumen…
Cybersecurity is no longer just a technical concern. It has become a business survival priority. A single data breach doesn't only expose data, it can erase ye…
* bsc#1243314 Cross-References: * CVE-2025-4945
Every day, businesses, teams, and project managers trust platforms like Trello, Asana, etc., to collaborate and manage tasks. But what happens when that trust …
Template email is more than a design tool in the campaign of consistent communication; it also has a hidden danger.
A Chinese-speaking advanced persistent threat (APT) actor has been observed targeting web infrastructure entities in Taiwan using customized versions of open-s…
SQL injection (SQLi) is one of those vulnerabilities that's deceptively simple in concept yet devastating in its impact. It's a family of security flaws tied t…
Cybersecurity researchers have discovered a set of 11 malicious Go packages that are designed to download additional payloads from remote servers and execute t…
Threat actors have been observed exploiting a now-patched critical SAP NetWeaver flaw to deliver the Auto-Color backdoor in an attack targeting a U.S.-based ch…
In what's the latest instance of a software supply chain attack, unknown threat actors managed to compromise Toptal's GitHub organization account and leveraged…
An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If…
Threat actors are leveraging public GitHub repositories to host malicious payloads and distribute them via Amadey as part of a campaign observed in April 2025.…
Governmental organizations in Southeast Asia are the target of a new campaign that aims to collect sensitive information by means of a previously undocumented …
Several security issues were fixed in GNU C Library.
With the average number of weekly cyberattacks per company rising by 75% in Q3 of last year, the pursuit of effective cybersecurity is relentless in the ever-e…
With the average number of weekly cyberattacks per company rising by 75% in Q3 of last year, the pursuit of effective cybersecurity is relentless in the ever-e…
