The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A flaw in Telegram for Android allowed an attacker to run code on a victim's phone via a voice call once the victim answered, according to security startup Neb…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape,…
Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management …
Security update
expat security update
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the stable…
Version 0.18.1 - 2026-10-12 Security Fix heap buffer over-read in amqp_read_message when a content header frame with a non-basic class id is received; AMQP_STA…
Version 0.18.1 - 2026-10-12 Security Fix heap buffer over-read in amqp_read_message when a content header frame with a non-basic class id is received; AMQP_STA…
Security update
A program could get past some Linux security rules by changing the number it sends with a request.
Hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers for about 2,000 customers.
A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on a Windows computer outside Microsoft Edge's sandbox, a se…
Security update
Security update
Security update
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus …
The new U.K. budget says the government will "consider where liability for cyber breaches should sit," potentially a landmark shift for a country that has reli…
Maddie Baker and Spencer Landers As cyberattacks continue across Japan, companies are coming to realize the great financial risk of such attacks if their lax c…
PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting…
An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, t…
libXtst security update
Upgrade to upstream release v2.41.6 with security-related patches.
Brotli 1.2.1 update which is security fix for CVE-2026-111497
Brotli 1.2.1 update which is security fix for CVE-2026-111497