Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Are you an Exim user? A critical security vulnerability has been discovered and fixed in the popular open-source Exim email server software, which could allow …
Social engineering is the art of exploiting human psychology, rather than technical hacking techniques, to gain access to buildings, systems or data. Learn how…
What could be worse than your router leaking its administrative login credentials in plaintext?Cybersecurity researchers from Trustwave's SpiderLabs have disco…
An update that solves 5 vulnerabilities can now be installed.
Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, ac…
Cybersecurity researchers have disclosed details of a now-patched vulnerability that could be exploited to bypass Lockdown Mode protections in OpenAI ChatGPT. …
An update that solves 3 vulnerabilities can now be installed.
Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers a…
An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.
Update to upstream-1.5.5. Includes fix for go CVE-2026-111943.
Update to upstream 1.5.5. Includes fix for go CVE-2026-111943.
Wasmtime has fixed a flaw that lets an untrusted program use up the memory of the server running it.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulner…
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a se…
Release of stargz snapshotter v0.19.0, containing fixes for CVE-2026-71482 and CVE-2026-77395. Release note is available on https://github.com/containerd/starg…
Release of stargz snapshotter v0.19.0, containing fixes for CVE-2026-71482 and CVE-2026-77395. Release note is available on https://github.com/containerd/starg…
An update that solves six vulnerabilities can now be installed.
CERT-UA says it has identified cases in which hackers compromised Dahua internet-connected cameras and video recorders, changed their settings and created unau…
Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox i…
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An online shop can be running normally while customers cannot reach it.
This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js…
