Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Spreadsheet::XLSX 0.20 Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata. Security: val…
Spreadsheet::XLSX 0.20 Security: limit ZIP entry counts and uncompressed sizes; read members incrementally and reject inconsistent size metadata. Security: val…
A buffer overflow was discovered in the handling of dBASE database files in LibreOffice, which could potentially result in the execution of arbitrary code. For…
Scammers are impersonating major brands and celebrities to lure consumers into fake gift card giveaways that collect personal information and trigger unwanted …
It was discovered that missing validation of event data in the agent of the Puppet configuration management system could result in code execution on the Puppet…
October 2026 brought another wave of cyber threats targeting US businesses, with attackers exploiting trusted platforms, legitimate authentication processes, a…
It was discovered that missing validation of event data in the agent of the Puppet configuration management system could result in code execution on the Puppet…
Nicole Wootton-Cane reports: At least 320,000 school files stolen during a cyber attack on Bristol City Council’s servers have been found posted to the dark we…
mSeven Software is warning current and former mSecure password manager customers to change passwords, reset two-factor authentication, and remove passkeys foll…
Apache Arrow gives data tools a shared way to organize information.
Richard Wood reports: A major cyber breach has been declared at NSW Health, but officials say patient data has not been affected. A spokesperson for Cyber Secu…
Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications.…
Members of Germany's political elite were among the spyware targets in 99 countries that Apple personally warned recently.
An attacker broke into the update system of the cPGuard security tool on November 2 and used it to send a malicious script to customers' Linux servers. The scr…
Synology is urging customers to update the DiskStation Manager (DSM) software powering its Network Attached Storage (NAS) devices following ransomware attacks.…
In more than 20 years of blogging about breaches, DataBreaches has never seen ransomware threat actors offer monetary compensation to patients affected by thei…
DataBreaches.net previously covered the 2023 Lehigh Valley Health Network breach by AlphV (aka “BlackCat”). The breach garnered a lot of public attention when …
An alliance of Belarusian and pro-Ukrainian hackers claimed to have taken out Russia's federal statistics agency, Rosstat, and stolen vast amounts of sensitive…
Changes for version 1.656 Remove lock file on end of scope Prevent dbi_profile crash (CVE-2026-108518) (Henrik Teichmann) Memory corruption via selectrow_array…
Version 3.3.11 (September 16, 2026) Changes Added menu items for moving column headers due to broken drag-and-drop in GTK Enabled fixed number of upload slots …
Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script refere…
The DOJ’s Executive Office for U.S. Trustees said a consumer privacy ombudsman is needed to advise the court on how to regulate what data from Character.AI can…
The state’s Department of Education (FLDOE) said on Thursday it became aware of a data breach involving the Florida Student Financial Aid website on October 19.
AI agents can control authenticated browsers, interact with corporate applications, and access sensitive data while appearing to act as legitimate employees. K…
