Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A Cursor zero-day vulnerability lets a planted git.exe run automatically when a Windows developer opens a repository. Mindgard disclosed it after seven months …
A researcher found that anyone with physical access to one Shark robot vacuum can extract its AWS IoT certificate and use it to take over other Shark vacuums r…
WordPress 6.9.5 and 7.0.2 fix wp2shell, a core REST API bug chaining route confusion and SQL injection into unauthenticated remote code execution.wp2shell: Wor…
A heap-based buffer overflow in 7-Zip's XZ decoder, patched in version 26.02, let a crafted archive run code on extraction and had gone unnoticed for five year…
An AI-driven threat actor called JADEPUFFER built ransomware that hunts AI model files specifically, entering through a known Langflow RCE and pivoting via an …
A practical checklist for the Azure DevOps MCP flaw that lets hidden PR comments hijack AI coding agents, plus the configuration changes to make right now.Azur…
A three-line SVG gave XBOW SYSTEM access on Bing's servers through a default ImageMagick setting. Here's the exploit chain and a checklist for anyone running a…
A practical checklist for the Fastjson RCE vulnerability (CVE-2026-16723): how the exploit chain works, four questions to answer this week, and how to mitigate…
openSUSE has released a security update for java-17-openjdk addressing nine vulnerabilities and includes bug fixes, with installation methods recommended throu…
openSUSE has released a security update for nginx addressing three vulnerabilities, including authorization bypass and buffer overflows, along with four bug fi…
An update for java-25-openjdk on openSUSE Tumbleweed fixes nine vulnerabilities, improving security posture with moderate ratings assigned to several CVEs. Use…
An update for libsrt1_5-1.5.6-1.1 on openSUSE Tumbleweed addresses two security vulnerabilities, allowing installation of the fixed packages.
Debian has released an update for the linux-6.1 package to address multiple security vulnerabilities, including privilege escalation and denial of service, rec…
A security update for java-17-openjdk on Rocky Linux 8 addresses multiple vulnerabilities, enhancing TLS certificate handling, DTLS handshaking, and processing…
An update for the moby-engine in Fedora 43 has been released, addressing upstream security vulnerabilities and introducing version 29.6.2, making Docker contai…
Fedora has released an update for MuPDF version 1.27.2 to fix CVE-2026-7233, an issue related to out-of-bounds read, enhancing security in the PDF viewer toolk…
Fedora has released an update for xrdp, which enhances compatibility and addresses several security vulnerabilities ranging from denial-of-service to buffer ov…
Fedora 44 updates GitPython to version 3.1.55, addressing multiple security vulnerabilities and enhancing functionality for interacting with git repositories v…
An update for xrdp, an open-source RDP server, addresses several security vulnerabilities and improves PAM file usage, enhancing compatibility with various RDP…
Mageia released updated wget packages addressing multiple security vulnerabilities, including denial of service and potential arbitrary code execution, affecti…
Mageia updates released for versions 10 and 9 address CVE-2026-53689, a security vulnerability in libnfs that allows for integer overflow during connections wi…
Mageia has released updated packages for versions 10 and 9 to fix a security vulnerability (CVE-2026-50593) in Graphite prior to 1.3.15, addressing an integer …
A security vulnerability in the ogg123 utility of vorbis-tools 1.4.3 has been fixed, addressing a buffer underflow risk that may allow code execution via malfo…
An update for python313-astropy-8.0.1-1.1 on openSUSE Tumbleweed addresses the CVE-2023-41334 vulnerability, improving security for affected users.
