Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
In yet another software supply chain attack, threat actors have compromised the popular GitHub Actions workflow, actions-cool/issues-helper, to run malicious c…
Rome, Italy, 13th May 2026, CyberNewswireRaccoonLine Shares Technical Overview of VLESS Protocol in New Engineering Explainer on Latest Hacking News | Cyber Se…
Agentic AI is already running in production environments across many organizations today. It is executing tasks, consuming data, and taking actions — most like…
Checkmarx has confirmed that a modified version of the Jenkins AST plugin was published to the Jenkins Marketplace."If you are using Checkmarx Jenkins AST plug…
A RCE (Remote Code Execution) escalation was discovered in Ruby on Rails, a MVC Ruby-based framework for web development. This vulnerability exists when using …
Linux has long carried a reputation for resilience, bolstered by open-source reviews, hardened kernels, and transparent development pipelines. While that trust…
A newly identified supply chain attack targeting DAEMON Tools software has compromised its installers to serve a malicious payload, according to findings from …
Linux security usually comes down to access controls and permissions, but those controls only work if the platform enforcing them holds up. What happens when t…
An update that solves 177 vulnerabilities, contains two features and has 28 fixes can now be installed.
Cybersecurity researchers have warned of malicious images pushed to the official "checkmarx/kics" Docker Hub repository.In an alert published today, software s…
A third individual who was employed as a ransomware negotiator has pleaded guilty to conducting ransomware attacks against U.S. companies in 2023.Angelo Martin…
# Security update for container-suseconnect Announcement ID: SUSE-SU-2026:1484-1 Release Date: 2026-04-20T13:35:38Z Rating: important References:
Austin, Texas, United States, 9th April 2026, CyberNewswireMallory Launches AI-Native Threat Intelligence Platform, Turning Global Threat Data Into Prioritized…
An apparent hack-for-hire campaign likely orchestrated by a threat actor with suspected ties to the Indian government targeted journalists, activists, and gove…
An update that fixes one vulnerability is now available.
Several security issues were fixed in Cairo.
Google has formally attributed the supply chain compromise of the popular Axios npm package to a financially motivated North Korean threat activity cluster tra…
Several security issues were fixed in Roundcube Webmail.
An update that solves 44 vulnerabilities, contains one feature and has seven security fixes can now be installed.
Three threat activity clusters aligned with China have targeted a government organization in Southeast Asia as part of what has been described as a "complex an…
# Security update for containerd Announcement ID: SUSE-SU-2026:1105-1 Release Date: 2026-03-27T07:03:56Z Rating: important References:
Microsoft has warned of fresh campaigns that are capitalizing on the upcoming tax season in the U.S. to harvest credentials and deliver malware.The email campa…
The threat actors behind the supply chain attack targeting the popular Trivy scanner are suspected to be conducting follow-on attacks that have led to the comp…
What is a port scan?A port scan is a diagnostic or reconnaissance technique used to identify open communication ports on a remote system. By sending packets to…
