Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell.…
Security update
Security update
Security update
Security update
Security update
This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhe…
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then…
libreswan security update
brotli security update
Multiple security vulnerabilities were discovered in imagemagick, a software suite used for editing and manipulating digital images, which could lead to denial…
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure Debian follows the Thu…
A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published t…
OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inf…
Security update
Security update
Security update
Update to 0.9.20. This replaces the 0.9.19 update before it reached testing. It carries the 0.9.17 security fix (GHSA-5xvm-66c9-p5ph), the 0.9.18 fix for 0.9.1…
Current upstream release, with several security fixes.
Current upstream release, with multiple security fixes, updates for performance and correctness.
Security update
Multiple security issues were discovered in Caddy, a web server with automatic HTTPS, which may result in the bypass of path- or host-based access controls, th…
Current upstream release, with several security fixes.
Current upstream release, with multiple security fixes, updates for performance and correctness.
