Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Rebuild rpki with newer versions of the rustls and rustls-webpki crates to address multiple security vulnerabilities (RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUS…
Critical: webkit2gtk3 security, bug fix, and enhancement update
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells …
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrator…
Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells …
SUSE released a security update for webkit2gtk3 addressing 23 vulnerabilities, improving stability, and introducing enhancements in response to various CVEs, a…
Fedora 43 update for python-webob to version 1.8.11 addresses CVE-2024-42353, providing tools for WSGI request and response handling, enhancing HTTP functional…
The update for python-webob to version 1.8.11 addresses CVE-2024-42353, enhancing WSGI request/response handling. Users can upgrade via the DNF package managem…
An update for the agama-web-ui package on openSUSE Tumbleweed addresses a moderate vulnerability, CVE-2026-13311, which can be installed to enhance system secu…
A security update for python-urwid addresses a vulnerability (CVE-2026-9323) related to insecure web session IDs, affecting multiple SUSE products, with instal…
A security update for python-urwid addresses a critical vulnerability affecting multiple SUSE products, ensuring web session IDs are cryptographically secure. …
A security update for webkit2gtk3 addresses 23 vulnerabilities, including issues that could lead to arbitrary JavaScript execution, unexpected crashes, and dat…
Nebula Security says a patched Firefox JIT flaw could be triggered by simply visiting a malicious webpage and was also used to compromise Tor Browser.Tracked a…
SUSE has released an important security update for webkit2gtk3, addressing 23 vulnerabilities, including issues with memory corruption, process crashes, and da…
openSUSE released a security update for agama-web-ui addressing 13 vulnerabilities with 14 bug fixes, focusing on various issues related to data handling and s…
The Fedora update for WebKitGTK version 2.52.5 includes crash fixes, increased network timeout, and multiple CVE vulnerabilities resolved, enhancing overall st…
Multiple vulnerabilities in WebKitGTK have been identified, leading to process crashes, memory corruption, and potential data leaks; users are urged to upgrade…
Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution.Steer t…
The Joomla Content Editor (JCE), one of the most widely deployed editor extensions for Joomla websites, is currently under active attack due to a critical vuln…
Several security issues were fixed in Roundcube Webmail.
Update to 146.0.7680.71 CVE-2026-3913: Heap buffer overflow in WebML CVE-2026-3914: Integer overflow in WebML CVE-2026-3915: Heap buffer overflow in WebML CVE-…
Update to 146.0.7680.71 * CVE-2026-3913: Heap buffer overflow in WebML * CVE-2026-3914: Integer overflow in WebML * CVE-2026-3915: Heap buffer overflow in WebM…
OpenClaw has fixed a high-severity security issue that, if successfully exploited, could have allowed a malicious website to connect to a locally running artif…
MGAA-2026-0015 - Updated webkit2 packages fix bug
