Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Potential log injection via unescaped request path. (CVE-2025-48432) References: - https://bugs.mageia.org/show_bug.cgi?id=34348 - https://www.openwall.com/lis…
FileUpload large number of parts with headers DoS. (CVE-2025-48988) Security constraint bypass for pre/post-resources. (CVE-2025-49125) References: - https://b…
Rebuild applications to apply two recent security updates: build with idna 1.0.0+ to address CVE-2024-12224 (idna accepts Punycode labels that do not produce a…
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
qt5-qtbase security update
The Canadian Centre for Cyber Security and the U.S. Federal Bureau of Investigation (FBI) have issued an advisory warning of cyber attacks mounted by the China…
Security fix for CVE-2025-47273
You know how we always preach to secure everything: servers, processes, applications? It turns out that a lot of us missed a serious blind spot hiding in plain…
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Security fix for CVE-2025-47273
New xorg-server packages are available for Slackware 15.0 and -current to fix a security issue.
Several security issues were fixed in Godot Engine.
podman security update
Some of the biggest security problems start quietly. No alerts. No warnings. Just small actions that seem normal but aren't. Attackers now know how to stay hid…
Cybersecurity researchers from SafeDep and Veracode detailed a number of malware-laced npm packages that are designed to execute remote code and download addit…
Cybersecurity researchers have discovered a novel attack technique called TokenBreak that can be used to bypass a large language model's (LLM) safety and conte…
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Several security issues were fixed in WebKitGTK.
The boundary between cyber and physical security is effectively gone. Attacks that once exploited software vulnerabilities now frequently begin with a compromi…
Microsoft has released patches to fix 67 security flaws, including one zero-day bug in Web Distributed Authoring and Versioning (WebDAV) that it said has come …
Secure Boot has long been advertised as the security boundary that keeps rogue software and untrusted code at bay during system startup. By checking cryptograp…
Several security issues were fixed in the Linux kernel.
A now-patched critical security flaw in the Wazur Server is being exploited by threat actors to drop two different Mirai botnet variants and use them to conduc…
