Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The Fedora 43 update for python-wsgidav version 4.3.5 fixes security issues CVE-2026-55509 and CVE-2026-55560, enhancing its WebDAV server capabilities.
Fedora 44 has released an update for python-wsgidav version 4.3.5, addressing security vulnerabilities CVE-2026-55509 and CVE-2026-55560, enhancing its WebDAV …
Mageia has released security updates for versions 10 and 9, addressing multiple vulnerabilities including XSS attacks, authentication bypass, and incomplete we…
Fedora has updated Perl to version 5.42.3, addressing a heap buffer overflow and information disclosure vulnerabilities, enhancing system administration and we…
A security update for python-urwid addresses a vulnerability where web session IDs are not cryptographically secure, affecting several SUSE Linux products, rel…
The Fedora 43 update for lemonldap-ng (version 2.23.2) enhances Web Single Sign On and fixes the CVE-2026-12804 vulnerability regarding an Open Redirect in SAM…
Fedora 44 has updated Lemonldap-ng to version 2.23.2, addressing CVE-2026-12804, which involves an open redirect vulnerability, enhancing security for its web …
A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can capture webcam images, microph…
Fedora has released PHP version 8.5.9, addressing various bugs, security issues, and improving functionality across multiple components, ensuring better stabil…
Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake web pages di…
The Fedora update for nginx-mod-naxsi includes a rebuild for version 1.30.4 and addresses multiple CVEs, enhancing security and functionality for the web appli…
A security update for libsoup resolves two vulnerabilities in SUSE Linux Micro 6.0, including an incomplete fix for an out-of-bounds read issue in WebSocket co…
An administrator reports unusual outbound traffic from a Linux server after firewall logs show repeated connections to an unfamiliar external IP address. Nothi…
Mageia 10 users are advised to update to Transmission 4.1.3 to address a clickjacking vulnerability in the WebUI and RPC response paths, identified as CVE-2026…
The threat actors behind the Golden Chickens malware-as-a-service (MaaS) ecosystem have resurfaced with four new malware families, indicating that the operator…
Multiple vulnerabilities were discovered in Roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in cross-site scripting, se…
Multiple vulnerabilities were discovered in roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in account takeover, cross-…
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys.A Shodan harveste…
Cybersecurity researchers have called attention to a new modular malware called TELEPUZ that's been spreading via websites infected with ClickFix lures since l…
Mozilla has released updates to address two critical flaws in Firefox for which it warned that exploit code has been published.The vulnerabilities are listed b…
A vulnerability has been found in the mesa 3D graphics library, possibly allowing out of bound memory access by craftet input. CVE-2026-40393 An out-of-bounds …
Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code e…
Linux security teams are drowning. Patches, kernel updates, new CVEs every week. SSH exposed here, an old web service there, and a forgotten cron job running a…
Researchers found a flaw in Opera GX, the gaming-focused version of the Opera browser, that let a malicious website silently install a browser add-on and use i…
