Stay Informed

Cybersecurity News

Home / News

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

BeyondTrust — CVE-2026-102764

Vulnerability Critical

BeyondTrust Remote Support: a zero-day exploited since August lets attackers take over the appliance without an account

BeyondTrust has fixed CVE-2026-102764, a critical flaw in Remote Support that lets an attacker with no account perform file operations on the appliance. According to Google and Ma…

BeyondTrustRemote accessLinux

Ivanti Connect Secure — CVE-2026-104935

Vulnerability Critical

Ivanti Connect Secure: zero-day chain exploited for root access, one of three flaws still unpatched

Attackers chained three unknown flaws in Ivanti Connect Secure VPN appliances to run commands as root without logging in, then harvested Active Directory credentials. Ivanti fixed…

IvantiVPNActive Directory

Danfoss AK-SM · AK-SC — CERTFR-2026-ALE-012

Hundreds of French supermarkets hit as attackers hijack Danfoss refrigeration controllers

During the night of 11 to 12 October 2026, attackers took control of Danfoss refrigeration supervisors in French supermarkets and forced fridges and freezers to heat up. CERT-FR i…

DanfossOT

Atlassian Data Center — CVE-2026-21589

Vulnerability High

Atlassian Data Center: critical flaw lets anyone read files on Jira, Confluence and Bitbucket servers

Atlassian disclosed on 5 October 2026 CVE-2026-21589 (CVSS 9.3), a path traversal flaw in eight self-hosted products, including Jira, Confluence and Bitbucket Data Center. No logi…

AtlassianJiraConfluence

FBI · PeopleSoft — CVE-2026-35273

Incident Critical

FBI breach: attackers got in through a PeopleSoft patch a contractor never installed

The FBI says the theft of personal data on thousands of its staff happened because a contractor did not apply a security patch to a platform it managed. According to Reuters, that…

OraclePeopleSoft

Microsoft Exchange — CVE-2026-96940

Vulnerability High

Microsoft Exchange: one stolen account is enough to read every mailbox — install the out-of-band fix

CVE-2026-96940 (CVSS 8.8) lets any authenticated user of an on-premises Exchange server read other people’s mail and attachments in the same organisation. Microsoft shipped an out…

ExchangeWindows

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Oracle Linux 9 ELSA-2026-3189 389-ds-base Moderate Remote Code Exec

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Linux 2026 core-configuration Access Vulnerabilities SLE-WU-2026-38129-5

An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 rsync 3.4.1 Important Fix for CVE-2025-10158 Buffer Access Issue

Fix for CVE-2025-10158

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed python310 Access Vulnerability CVE-2025-11468

An update that solves 6 vulnerabilities can now be installed.

The Hacker News

The Hacker News Vulnerabilities

Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 Vulnerability

Threat actors have started to exploit a recently disclosed critical security flaw impacting BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) …

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 22.04 Dottie Critical Remote Code Execution USN-8041-1

Dottie could be made to run programs if it received specially crafted network traffic.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

SUSE Linux important Update nvidia-modprobe CUDA System Access 2026-0456-1

# Security update for nvidia-modprobe.cuda, nvidia-open-driver-G06-signed, nvidia-persistenced.cuda Announcement ID: SUSE-SU-2026:0456-1 Release Date: 2026-02-…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed localsearch Moderate Access Control Issue 2026-10162-1

An update that solves 4 vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 15.6 glib2 Important Buffer Overflow and Heap Access Patch

An update that solves three vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE libvirt Security Fix CVE-2025-12748 Addresses Access Control Risk

An update that solves two vulnerabilities and has one security fix can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Oracle Linux 7 ELSA-2026-0926 Net-SNMP Important Out of Bound Access

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Leap 15.6 java-21-openjdk Important Remote Code Exec 2026-0363-1

An update that solves four vulnerabilities and contains two features can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories

Ubuntu 25.10 OpenJDK 8 Critical Remote Code Exec Security Alert USN-8000-1

Several security issues were fixed in OpenJDK 8.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu OpenJDK 11 Key Remote Code Execution Advisory USN-8001-1

Several security issues were fixed in OpenJDK 11.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 42 fontforge Critical Remote Execution Fix FEDORA-2026-9b8156c2a9

Resolves: CVE-2025-15279, CVE-2025-15275, CVE-2025-15269

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Addressing Security Flaw in Ubuntu 25.10 containerd for Unauthorised Access

Several security issues were fixed in containerd.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed zot-registry Moderate Access Issue CVE-2025-30204

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Critical Remote Code Execution Vulnerability in Fedora 43 mingw-openexr

Update to openexr-3.3.6, fixes multiple security issues.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Alerts

Fedora 42 mingw-openexr Security Advisory 2026-0e8fe3c8a3 Remote Code Exec

Update to openexr-3.3.6, fixes multiple security issues.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 15.6 openvswitch Critical DoS Memory Access Vulnerability Alert

An update that solves seven vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 42: Important Advisory for MariaDB 11.8.5 Remote Code Execution

MariaDB 11.8.5 Release notes: https://mariadb.com/docs/release-notes/community- server/11.8/11.8.5

Linux Databases

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: libvirt Moderate Security Fix Access Control Issue 2026:0193-1

An update that solves two vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora: Exim Critical Remote Heap Corruption CVE-2025-67896 2026-223569b08a

This is new exim version fixing CVE-2025-67896.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Mageia 9: gimp Critical Remote Code Execution Vuln MGASA-2026-0012

MGASA-2026-0012 - Updated gimp packages fix security vulnerabilities