The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security update
Security update
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 mal…
An update that solves 229 vulnerabilities, contains one feature and has five security fixes can now be installed.
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this wee…
An update that solves three vulnerabilities and has one security fix can now be installed.
Moderate: environment-modules security update
Several security issues were fixed in the Linux kernel.
AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment, and understanding business cont…
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-s…
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal…
Critical: idm:DL1 security, bug fix, and enhancement update
The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, acco…
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows develo…
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability,…
Moderate: curl security update
Important: python36:3.6 security update
idm:DL1 security, bug fix, and enhancement update
rpcbind security update
ghostscript security update
grafana security update
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targetin…
Several security issues were fixed in urllib3.
Several security issues were fixed in curl.