Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Starlet 0.33 fixes several security issues in the Starlet code: * prevent excessive CPU use when parsing malformed chunk-size lines * bound read allocations fo…
Several security issues were fixed in OpenJDK 17.
Several security issues were fixed in OpenJDK 21.
Several security issues were fixed in OpenJDK 11.
Several security issues were fixed in OpenJDK 27.
Several security issues were fixed in OpenJDK 25.
N-able has taken its hosted N-central environments offline and urged on-premises customers to shut down their servers after a security researcher publicly disc…
York University has announced it suffered a cybersecurity incident in which a threat actor stole personal information people submitted through online forms.…
Sergiu Gatlan reports: Binance, the world’s largest crypto exchange, has denied claims of a new security breach made by a threat actor using the ‘ShinyHunters’…
An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security …
Binance, the world's largest crypto exchange, has denied claims of a new security breach made by a threat actor using the 'ShinyHunters' handle on a newly emer…
The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's acc…
Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to r…
Everyone running LNbits, a free, open-source Bitcoin Lightning wallet system, should shut down their servers now because of a wave of attacks, the project said…
Security Fixes: CVE-2026-94300 Fix remote termination of named under concurrent GSS-TSIG traffic (rhbz#2558420) CVE-2026-97313 Fix a bug when resuming from a q…
Moderate: protobuf-c security update
Important: tesseract security update
Zack Whittaker reports: Security researchers have discovered hundreds of copies of a Chinese-made AI hacking tool publicly exposed to the internet for anyone t…
November 6, 2026 8:00 PM EST NEWTON, N.J., Nov. 6, 2026 /PRNewswire/ — Sussex County Prosecutor’s Office (SCPO) experienced a data privacy event that involved …
From Norway’s aid agency, Norad, November 3: Norad has been targeted by a cyberattack in which the perpetrators may have gained access to the names and email a…
Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. …
Low: qt5-qtsvg security update
An update that solves one vulnerability and has two security fixes can now be installed.
An update that solves one vulnerability and has two security fixes can now be installed.
