Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves 2 vulnerabilities can now be installed.
Update to upstream 1.5.4, including fix for high severity vulnerability GHSA- cr2j-534f-mf3g and for CVE-2026-41178.
Update to upstream 1.5.4, including fix for high severity vulnerability GHSA- cr2j-534f-mf3g and for CVE-2026-41178.
Update to upstream 1.5.4, including fix for high severity vulnerability GHSA- cr2j-534f-mf3g and for CVE-2026-41178.
A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real serv…
The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party security product the e…
Multiple security vulnerabilities were discovered in the Lemonldap::NG web SSO system, which could result in a bypass of access controls, authorisation bypass …
An update that solves 3 vulnerabilities can now be installed.
An update that solves 6 vulnerabilities and has 4 bug fixes can now be installed.
ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an attachment, or a file on disk. Our new gl…
An update that solves six vulnerabilities can now be installed.
Important: firefox security update
An update that solves 4 vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability and has one bug fix can now be installed.
Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC validator, maintainer NLnet Labs said in an advisory on Wedn…
Release 1.7.4 Use X-Content-Type-Options:nosniff for attachment previews and downloads (#10308) zipdownload: Fix attachment filename sanitisation of backslash …
An update that solves 27 vulnerabilities can now be installed.
An update that solves four vulnerabilities and has two security fixes can now be installed.
The urwid web display backend generates web session identifiers by concatenating two random.randrange(10**9) calls that use Python's Mersenne Twister PRNG, whi…
An update that solves 5 vulnerabilities can now be installed.
The 7.2.4 stable kernel update contains a number of important fixes across the tree. The 7.2.3 stable kernel update contains a number of important fixes across…
The 7.2.4 stable kernel update contains a number of important fixes across the tree. The 7.2.3 stable kernel update contains a number of important fixes across…
An update that solves 39 vulnerabilities and has 21 bug fixes can now be installed.
