Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 43 has released WordPress version 6.9.5, addressing security vulnerabilities including SQL injection and remote code execution issues. Users can update …
An important security update for perl-Archive-Tar on Rocky Linux 8 addresses a path traversal vulnerability allowing arbitrary file access, with a CVSS score o…
A security update for java-17-openjdk resolves nine vulnerabilities, enhancing security by addressing potential information disclosure, unauthorized data acces…
A significant security update for the kernel in Rocky Linux 8 addresses a vulnerability that may allow unintended access, with a CVSS base score of 7.0.
Fedora 43 update for kronosnet version 1.35 addresses three vulnerabilities, improving security through memory management and access control enhancements, whil…
Fedora 43 updates gpsd to version 3.26.1-7, addressing CVE-2026-58459 to fix a command injection vulnerability, allowing safer GPS data access for multiple cli…
A security update for Samba addresses seven vulnerabilities affecting various SUSE Linux products, including issues related to LDAP access and packet parsing, …
A security update for Samba addresses seven vulnerabilities affecting various SUSE products, including risks from improper handling of DNS packets and LDAP acc…
A security update for nginx addresses two vulnerabilities, including a heap-based buffer overflow and remote denial of service, impacting various SUSE products…
A security update for java-21-openjdk addresses nine vulnerabilities, notifying users of potential unauthorized access and service disruptions; installation in…
Ubuntu security notice USN-8621-1 addresses several vulnerabilities in Samba affecting various LTS releases, allowing potential denial of service and unauthori…
Microsoft has launched its first cybersecurity-specific model inside MDASH, its multi-model vulnerability identification and remediation harness.The company sa…
Microsoft has launched its first cybersecurity-specific model inside MDASH, its multi-model vulnerability identification and remediation harness.The company sa…
A security update for glib2 addresses six vulnerabilities, enhancing the security of various SUSE products and improving protection against potential out-of-bo…
A researcher found that anyone with physical access to one Shark robot vacuum can extract its AWS IoT certificate and use it to take over other Shark vacuums r…
WordPress 6.9.5 and 7.0.2 fix wp2shell, a core REST API bug chaining route confusion and SQL injection into unauthenticated remote code execution.wp2shell: Wor…
A three-line SVG gave XBOW SYSTEM access on Bing's servers through a default ImageMagick setting. Here's the exploit chain and a checklist for anyone running a…
A security update for SVT-AV1, libyuv0, and libaom3 addresses multiple vulnerabilities, allowing potential memory corruption and remote code execution, requiri…
Ubuntu Security Notice USN-8598-1 addresses vulnerabilities in rsyslog affecting multiple versions of Ubuntu, which could allow remote attackers to cause denia…
Mageia released updates for dnsmasq to fix critical security vulnerabilities, including a heap-based buffer overflow and an out-of-bounds read, potentially ena…
Google's DeepMind on Tuesday announced the release of Gemini 3.5 Flash Cyber, a specialized artificial intelligence (AI) model built atop 3.5 Flash that's desi…
A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the grid it runs on, with no explo…
Before the week gets away from you, take a look at what's landed across the Linux ecosystem. The volume of security advisories hasn't slowed, and while not eve…
Root access on a Linux system rarely arrives through a zero-day.
