Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Moderate: freeradius:3.0 security update
Moderate: freeradius:3.0 security update
Low: libpq security update
Moderate: freeradius:3.0 security update
Moderate: freeradius:3.0 security update
Cybersecurity researchers have flagged yet another evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades malware family that ha…
Important: python3.14-urllib3 security update
Moderate: opencryptoki security update
Moderate: opencryptoki security update
Important: python3.14-urllib3 security update
A technical breakdown of how a VPN works: packet handling, protocol comparisons, DNS and WebRTC leak vectors, kill switch limitations, and why the enterprise V…
Three malicious npm packages posing as PostCSS tools have been installing a Windows RAT on developer machines. Here is how to detect them and what to do if you…
A SANS audit of 14 patched SonicWall firewalls shows Akira ransomware still getting in via stale accounts and LDAP misconfigurations the firmware update never …
Important: rsync security update
Several security issues were fixed in libxml2.
A new report from INTERPOL has revealed a "dramatic increase" in cybercrime in Asia and the South Pacific, fueled by rapid digitalization, internet penetration…
Multiple security vulnerabilities were found in mediawiki, a website engine for collaborative work, which could lead to information disclosure or access contro…
Important: rsync security update
Cybersecurity researchers have charted the evolution of INC from an nascent ransomware-as-a-service (RaaS) operation to one of the most prolific cybercrime gro…
Privilege escalation is the pivot point in almost every serious intrusion. This guide explains where it fits in the attack chain, the tooling attackers use, an…
Cybersecurity researchers have flagged a "coordinated malware campaign" on the JetBrains Marketplace that has published no less than 15 malicious plugins capab…
Ransomware still encrypts files with a hybrid AES/RSA scheme, but the data theft and backup destruction that happen before encryption are where modern attacks …
An AUR supply chain attack compromised more than 400 Arch Linux packages from 11 June 2026, planting a Rust credential stealer and an eBPF rootkit that hides f…
A CVSS 9.3 flaw in Check Point Remote Access VPN let unauthenticated attackers bypass certificate validation by supplying a crafted IKEv1 VendorID payload — ex…
