Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Exim may be the Internet's most popular email server, but the MTA's recent history with security vulnerabilities is concerning to say the least. This past Frid…
Huawei has filed a motion for a summary judgment against the US government that alleges section 889 of the National Defense Authorization Act 2019 (NDAA) is un…
Mozilla, the company behind the open-source browser Firefox, announced previously that the next version of it browser, Firefox 3, will include a host of securi…
The latest Microsoft bug is a doozy. Why do these things keep cropping up? The federal government and technology industry want you to believe the threats to ou…
The CORE SDI team has found a vulnerability in the SSH 1.5 protocol that allows an attacker to retrieve the session key, which could then allow them to decrypt…
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru.…
An update that solves 10 vulnerabilities can now be installed.
An update that solves 14 vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The issue is that these tools are growing m…
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows develo…
Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with r…
An update that solves three vulnerabilities can now be installed.
Several security issues were fixed in OpenSSH.
AI-powered penetration testing can uncover complex attack paths, but safety restrictions and network limitations leave many assets and vulnerabilities untested…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure…
The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part. TL;DR During an authorized assessmen…
Important: flatpak-builder security update
The South African retail giant The Foschini Group (TFG) disclosed a cyberattack that disrupted IT systems at three of its British fashion brands, leaving some …
An update that solves nine vulnerabilities can now be installed.
A user opens a browser tab, pastes data into a chat assistant, and nothing is installed. A developer adds a coding assistant as an editor extension, and nothin…
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Update to 2026.10
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
