Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 0.9.20. This replaces the 0.9.19 update before it reached testing. It carries the 0.9.17 security fix (GHSA-5xvm-66c9-p5ph), the 0.9.18 fix for 0.9.1…
Current upstream release, with several security fixes.
A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a m…
Important: firefox security update
Important: firefox security update
Important: firefox security update
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw tha…
An update that solves two vulnerabilities and has one security fix can now be installed.
An update that solves two vulnerabilities and has one security fix can now be installed.
Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind fo…
Important: postgresql16-pgvector security update
Important: postgresql18-pgvector security update
The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has…
Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severit…
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 …
Important: httpd security update
Important: flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine…
Multiple security vulnerabilities were discovered in Unbound, a validating, recursive, caching DNS resolver. CVE-2026-35501 (DNSSEC) Bypass of a configured isl…
AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security fi…
Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Th…
Security update
Security update: - RCE via OOM corruption, CVE-2026-109618 - RCE via stale global state, CVE-2026-109619
php:7.2 security update
php:8.0 security update
