Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
osbuild-composer security update
A newly confirmed Kestra vulnerability is being exploited in the wild. CISA added CVE-2026-49869 to its Known Exploited Vulnerabilities catalog on Sep 2, 2026,…
Virtualizor has confirmed that a BGP hijack redirected traffic for part of its update infrastructure and allowed an attacker-controlled server to deliver a mal…
A vulnerability in SPIP could allow unauthenticated remote code execution; it has been fixed in version 4.4.21+dfsg-0+deb13u1 for the stable distribution.
An update for python-sqlalchemy (2.0.52) includes bug fixes and enhancements for related packages, providing improved flexibility for SQL databases with a high…
A good ad blocker is one of those browser additions you stop noticing once it’s working. Pages settle down. Autoplay boxes disappear. News sites stop shifting …
A security update for Erlang has been released, addressing 19 vulnerabilities, including issues related to DNS cache poisoning, certificate forgery, and Denial…
When an authentication platform goes down, downstream applications go with it. Employees can't sign in, customers get locked out, and scheduled jobs quietly fa…
A vulnerability in SPIP could allow unauthenticated remote code execution; an update has been released for the stable distribution, and users are advised to up…
The security release of php-pear-PHP-CodeSniffer version 4.0.4 addresses vulnerabilities and improves error messages, tokenizer support for PHP 8.5, and overal…
A security update for the erlang-cowboy package addresses various vulnerabilities in cowlib and cowboy, including denial of service risks, with significant cha…
A command injection vulnerability in the Info-ZIP zip program was discovered, prompting the recommendation to upgrade zip packages in the stable distribution.
A security update for helm addresses three vulnerabilities, including privilege escalation and credential exfiltration issues, with a critical CVSS score of 9.…
A security update for BIND has been released, addressing six vulnerabilities that could lead to issues such as cache poisoning, memory misuse, and DNSSEC valid…
Multiple vulnerabilities in the Caddy web server can lead to unauthorized access and other security issues; users are urged to upgrade to version 2.6.2-12+deb1…
The update for python-webob to version 1.8.11 addresses CVE-2024-42353, enhancing WSGI request/response handling. Users can upgrade via the DNF package managem…
Multiple vulnerabilities in the Icinga 2 monitoring system could lead to denial of service, information disclosure, privilege escalation, or the compromise of …
A vulnerability in PowerDNS Recursor can cause denial of service due to increased resource usage when handling malicious DNS packets; an upgrade is recommended…
A security update for ffmpeg-4 addresses seven vulnerabilities, including issues leading to denial of service, code execution, and memory corruption in various…
A local privilege escalation vulnerability in udisks2 (CVE-2026-7867) allows unprivileged users to influence mount execution paths, necessitating an upgrade to…
A security update for rsyslog addresses vulnerability CVE-2026-61548, which may lead to stack buffer overflow, and a crash due to a configuration issue in the …
Multiple vulnerabilities were discovered in the starlette ASGI framework, necessitating an upgrade to version 0.26.1-1+deb12u2 to address issues related to met…
Your operating system forms the base layer of your production pipeline. Moving from a basic workstation layout to an enterprise environment takes deliberate wo…
An update for nginx-mod-vts and related modules is available, addressing vulnerabilities and rebuilding for nginx version 1.30.4. Users can install it using th…
