Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A Linux security hook should be able to check a task without invalidating the identity data that surrounding kernel code is still using. AppArmor broke that ex…
A Linux dm-integrity patch posted on Aug 24, 2026 targets a writeback race that can leave stored data with the wrong integrity tag after a crash. Chen Cheng pr…
A security update for SUSE Linux Kernel fixes 18 vulnerabilities addressing various issues and bugs, including memory leaks and data handling problems, enhanci…
An update for PostgreSQL on openSUSE Tumbleweed addresses 24 vulnerabilities, enhancing security with fixes for multiple CVEs rated from moderate to high sever…
An update to AusweisApp2 version 2.5.5 is now available for Fedora 43, allowing online identification with German ID cards and providing access to stored data.
Fedora 44 has released AusweisApp2 version 2.5.5, which allows online identification using German ID cards, featuring data self-assessment. Users can update vi…
An update for python-sqlalchemy (2.0.52) includes bug fixes and enhancements for related packages, providing improved flexibility for SQL databases with a high…
Fedora 43 has released an update for DokuWiki, fixing a bypass issue in the "disableactions" mechanism, enhancing its usability in documentation without needin…
In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who weren’t authorized …
Rocky Linux 9 has released an important security update for MySQL 8.4, addressing multiple unspecified vulnerabilities, bugs, and enhancements to improve datab…
The Fedora 44 update for GitPython version 3.1.59 addresses multiple security vulnerabilities and enhances performance for interacting with Git repositories, o…
A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to victim organizations and claims to delete stolen data from …
Oracle Linux 10 has updated packages addressing CVEs 2026-73433 and 2026-73434, which involve fixes for out-of-bounds reads in the AVI demuxer and FUJIFILM met…
A SUSE security update addresses ten vulnerabilities in java-1_8_0-openjdk, improving system security by fixing issues related to data access and denial of ser…
An update for Mageia 10 addresses a bug in sar2 that prevented the game from starting due to data path issues, resolving the reported problem.
Fedora has released an update for PowerDNS version 5.0.7, enhancing its authoritative DNS server capabilities while addressing security issues and providing co…
A security update for java-1_8_0-ibm resolves 14 vulnerabilities affecting several SUSE Linux products, enhancing security by addressing issues including unaut…
Debian LTS Advisory DLA-4739-1 highlights security vulnerabilities in Chromium that could lead to code execution, denial of service, or data exposure, recommen…
A previously unseen Android near field communication (NFC) relay malware family dubbed WindRelay is being deployed in conjunction with a known remote access tr…
A security update for rpm addresses a critical heap buffer overflow vulnerability in NDB database backend, affecting several SUSE products and recommending ins…
SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution.…
The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications and data leak operations in a b…
A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets, source code, and customer data without eve…
Debian has released an advisory for OpenJDK-21 addressing multiple vulnerabilities that could lead to certificate validation issues, denial of service, or data…
