Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Following the release of iOS 13 and iPadOS earlier this week, Apple has issued an advisory warning iPhone and iPad users of an unpatched security bug impacting…
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remo…
A vulnerability was discovered in SPIP, a website engine for publishing, which could result in unauthenticated remote code execution. For the stable distributi…
Go could allow unintended access to network services.
Multiple vulnerabilities were discovered in MariaDB, a SQL database server compatible with MySQL. An authenticated attacker may perform denial-of-service, unau…
Anthropic on Friday said it's cutting off live internet access for all its internal evaluations following the discovery of new incidents in which its artificia…
Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted …
OpenStack Aodh and Watcher could allow unintended access to network services.
Three vulnerabilities were discovered in FreeCAD, an open-source multiplatform 3D parametric modeler, which could result in arbitrary code execution, arbitrary…
Several vulnerabilities were discovered in wordpress, a web blogging tool, which could result in cross-site scripting, privilege escalation or remote code exec…
Multiple security vulnerabilities were discovered in the Lemonldap::NG web SSO system, which could result in a bypass of access controls, authorisation bypass …
Update to 1.26.1 (rhbz#2535076) Security fix list from upstream: Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code Execution when digesting DNS…
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
A vulnerability has been discovered in Ruby, possibly allowing remote code execution.
Several vulnerabilities were discovered in SPIP, a website engine for publishing, which could result in unauthenticated remote code execution. For the stable d…
Flatpak could be made to access files outside its sandbox or delete arbitrary files on the host.
Rocky Linux 9 has released an important security update for python-urwid addressing a vulnerability that could lead to remote code execution and information di…
A security update for gstreamer1-plugins-good on Rocky Linux 9 addresses multiple vulnerabilities, including remote code execution risks from buffer overflows …
A security update for gstreamer1-plugins-good in Rocky Linux 10 addresses critical vulnerabilities, including remote code execution risks via heap-based buffer…
Fedora has released an update for calibre, version 9.13.0, enhancing its e-book management features and addressing several vulnerabilities including potential …
A significant security update for python-urwid on Rocky Linux 8 addresses a vulnerability that could lead to remote code execution and information disclosure, …
A vulnerability in SPIP could allow unauthenticated remote code execution; it has been fixed in version 4.4.21+dfsg-0+deb13u1 for the stable distribution.
Fedora has released WordPress version 6.9.7, addressing multiple security vulnerabilities, including remote code execution and stored cross-site scripting issu…
Gentoo Linux has issued a high-severity security advisory regarding multiple vulnerabilities in libssh2, which could lead to remote code execution; affected us…
