Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
ConnectWise has taken the precautionary step of disabling five third-party extensions in partner environments following reports of unauthorized access. In an a…
A certificate authority (CA) verifies a name or identity and then signs a digital certificate linking it to a public key.
An AI assistant that can explain a cluster problem may also have permission to change it.
The 3.5.2 version included a regression that can cause "Operation not supported" errors when preserving permissions. New version 3.5.2, includes the fix for CV…
New rsync packages are available for Slackware 15.0 and -current to fix security issues.
It was discovered that incorrect validation of hostname ACLs in the authorisation service of Trapperkeeper, a service framework used by Puppet servers, could a…
Verify TLS server certificate (fixes fedora#2546280)
Verify TLS server certificate (fixes fedora#2546280)
Verify TLS server certificate (fixes fedora#2546280)
Security GHSA-h664-qxhh-gx3w CVE-2026-109545 GHSA-2q8j-chww-3pcq CVE-ID requested GHSA-5mqr-9575-x89w CVE-ID requested GHSA-rjg6-phr3-3rxw CVE-ID requested
An update that solves one vulnerability can now be installed.
Forty percent of security teams now use AI every day, and another 56% are testing it. Only 4% have no plans to adopt it, according to Prophet Security's State …
Important: libreswan security update
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 mal…
NGINX has patched flaws that could let request data bypass a size limit or allow an encrypted session to be forged.
An update that contains one feature can now be installed.
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memor…
A bug in Linux’s TCP Fast Open code can leave it reading memory that has already been released.
Andrey Misiurov has proposed a patch for a Linux NTFS bug that lets a crafted disk image make the kernel read beyond a memory buffer.
The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injected with malicious JavaScript t…
Citrix has confirmed targeted attacks involving a Citrix NetScaler vulnerability and urged affected customers to update.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Update to gstreamer-1.28.7.
