Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Rebuild ntpd-rs with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities (RUSTSEC-2026-0049, RUSTSEC-2026-0098, …
Rebuild retsnoop with newer versions of the ruzstd (fedora, epel10, epel9) and memmap2 (fedora, epel10, epel10.3, epel10.2, epel9) crates to address multiple s…
Update to v1.4.3 (rhbz#2549665): Security fixes: - [SEC] Fix potential buffer overflow in Record&Play plugin (PR #3688) - [SEC] Fix master/helper session switc…
streamlink 8.6.2 (2026-10-07) SECURITY: fixed arbitrary local file read via file:// URLs in DASH Location tags (CVE-2026-TO-BE-ASSIGNED / GHSA-j7pf-m7gx-jr33) …
Security GHSA-h664-qxhh-gx3w CVE-2026-109545 GHSA-2q8j-chww-3pcq CVE-ID requested GHSA-5mqr-9575-x89w CVE-ID requested GHSA-rjg6-phr3-3rxw CVE-ID requested
Rebuild rpki with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities (RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUS…
Rebuild rpki with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities (RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUS…
Rebuild sequoia-git with newer versions of the rustls, rustls-webpki, and crossbeam-epoch crates to address multiple security vulnerabilities (RUSTSEC-2026-020…
Rebuild sequoia-git with newer versions of the rustls, rustls-webpki, and crossbeam-epoch crates to address multiple security vulnerabilities (RUSTSEC-2026-020…
Rebuild asciinema with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities (RUSTSEC-2026-0285, RUSTSEC-2026-0346…
Update to 0.9.20. This replaces the 0.9.19 update before it reached testing. It carries the 0.9.17 security fix (GHSA-5xvm-66c9-p5ph), the 0.9.18 fix for 0.9.1…
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.11. This addresses security advisories …
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.11. This addresses security advisories …
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.11. This addresses security advisories …
Update to 0.9.20. This replaces the 0.9.19 update before it reached testing. It carries the 0.9.17 security fix (GHSA-5xvm-66c9-p5ph), the 0.9.18 fix for 0.9.1…
Multiple security vulnerabilities were discovered in imagemagick, a software suite used for editing and manipulating digital images, which could lead to denial…
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882…
A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations…
Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute…
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure For the stable distrib…
An issue has been found in cyrus-sasl2, a SASL (Simple Authentication and Security Layer) implementation for the Cyrus mail system. The issue is related to a h…
Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability, …
Flaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes, and impersonate subscri…
Drupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-11…
