Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
In this increasingly digital era, every business, no matter the size, has to be vigilant about its cybersecurity. Data breaches have become rampant over the pa…
Important: jq security update
Important: tigervnc security update
The U.S. Department of Justice (DoJ) on Thursday announced the sentencing of two cybersecurity professionals to four years each in prison for their role in fac…
An update that solves one vulnerability and has one security fix can now be installed.
Cybersecurity researchers are sounding the alarm about a new supply chain attack campaign targeting SAP-related npm Packages with credential-stealing malware.A…
Threat actors with ties to Iran successfully broke into the personal email account of Kash Patel, the director of the U.S. Federal Bureau of Investigation (FBI…
A new analysis of endpoint detection and response (EDR) killers has revealed that 54 of them leverage a technique known as bring your own vulnerable driver (BY…
A new analysis of endpoint detection and response (EDR) killers has revealed that 54 of them leverage a technique known as bring your own vulnerable driver (BY…
MGASA-2026-0036 - Updated thunderbird packages fix security vulnerability
Cybersecurity researchers have disclosed details of an emergent ransomware family dubbed Reynolds that comes embedded with a built-in bring your own vulnerable…
Changes with nginx 1.28.1 23 Dec 2025 *) Security: processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail…
Privacy and security have never been more important—or more under threat. With headlines constantly reporting data breaches, hacks, and the unchecked collectio…
Several security issues were fixed in radare2.
Out-of-bounds reads sit quietly in Linux security. You don't always see them until the code steps past a buffer and hands back a piece of memory it was never s…
The threat actor known as ToddyCat has been observed adopting new methods to obtain access to corporate email data belonging to target companies, including usi…
Linux security comes from how the system is put together at the core. The layout of users, processes, and kernel space gives it a stable baseline that holds up…
Linux security sits at the center of modern infrastructure. Most production systems, cloud workloads, and IoT devices run on it in some form. That reach gives …
Machine learning now runs deep inside Linux security workflows, from containerized inference services to open-source model pipelines. These systems look harmle…
Security doesn’t fail at the point of breach. It fails at the point of impact. That line set the tone for this year’s Picus Breach and Simulation (BAS) Summit,…
Security never stays still. Every new vendor connection, cloud integration, or endpoint expands the surface attackers can reach. Phishing kits evolve, fake dom…
ClickFix, FileFix, fake CAPTCHA — whatever you call it, attacks where users interact with malicious scripts in their web browser are a fast-growing source of s…
A new Unity runtime vulnerability has surfaced, and Linux users are the ones left exposed. The flaw allows untrusted files to execute code inside affected appl…
Think your WAF has you covered? Think again. This holiday season, unmonitored JavaScript is a critical oversight allowing attackers to steal payment data while…
