Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security update
Security update
Security update
This update includes httpd version 2.4.69 addressing various security issues, see https://downloads.apache.org/httpd/CHANGES_2.4.69 for more information.
Update to 155.0.8059.39, includes 37 security fixes CVE-2026-110136: Use after free in PDF CVE-2026-110137: Use after free in WebRTC CVE-2026-110138: Use after…
An update that solves 28 vulnerabilities and has two security fixes can now be installed.
A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, …
Important: ghostscript security update
Important: ghostscript security update
Important: ghostscript security update
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 …
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remo…
Security update
Security update
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 mal…
An update that solves 229 vulnerabilities, contains one feature and has five security fixes can now be installed.
An update that solves three vulnerabilities and has one security fix can now be installed.
Moderate: environment-modules security update
Several security issues were fixed in the Linux kernel.
AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment, and understanding business cont…
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-s…
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal…
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows develo…
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability,…
