Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An problem has been fixed with the handling of the AVRCP protocol in the bluetooth stack that could lead to remote code execution. For Debian 10 buster, this p…
A flaw was found in the tpm2-tss package, where there was no check that the magic number in the attest is equal to the TPM2_GENERATED_VALUE. This flaw allows a…
Several security issues were fixed in the Linux kernel.
Cisco is warning of attempted exploitation of a security flaw in its IOS Software and IOS XE Software that could permit an authenticated remote attacker to ach…
Microsoft warns over recent work by the '8220' malware gang to compromise Linux systems and install cryptomining malware.
The Russian government on Thursday warned of cyber attacks aimed at domestic critical infrastructure operators, as the country's full-blown invasion of Ukraine…
Network-attached storage (NAS) appliance maker QNAP on Tuesday released a new advisory warning of a cryptocurrency mining malware targeting its devices, urging…
Ivanti, the company behind Pulse Secure VPN appliances, has published a security advisory for a high severity vulnerability that may allow an authenticated rem…
An anonymous hacker today publicly revealed details and proof-of-concept exploit code for an unpatched, critical zero-day remote code execution vulnerability i…
Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating dist…
Several vulnerabilities have been discovered in the WebKitGTK web engine, that may lead to heap corruption, local privilege escalation, remote code execution, …
FreeIPA 4.13.4 security release Upstream release notes: https://www.freeipa.org/release-notes/4-13-4.html
Attackers are exploiting a critical Cisco ISE flaw that can open the product’s web management interface without a valid login. Cisco disclosed CVE-2026-76460 o…
The Fedora 43 update for NextCloud version 34.0.3 addresses multiple security vulnerabilities including XSS and prototype pollution, enhancing the file sync an…
Fedora 44 has released an update for NextCloud version 34.0.3, addressing multiple security vulnerabilities including cross-site scripting and prototype pollut…
Ubuntu has issued a security notice addressing multiple vulnerabilities in the Linux-nvidia-6.17 kernel for version 24.04 LTS, urging users to update and reboo…
Fedora 43 has released an update for DokuWiki, fixing a bypass issue in the "disableactions" mechanism, enhancing its usability in documentation without needin…
Multiple vulnerabilities in Bind9 affecting various Ubuntu LTS versions have been addressed, potentially allowing remote attacks leading to impersonation, deni…
A security update for Ubuntu 14.04 LTS addresses multiple vulnerabilities in the Linux kernel, potentially allowing system compromise. Users should update and …
Debian's advisory DLA-4736-1 addresses two Django vulnerabilities: potential denial-of-service from long language codes and cross-site scripting via unvalidate…
Ubuntu released security notice USN-8630-1 addressing vulnerabilities in the Linux kernel for various systems, requiring users to update and reboot their insta…
A security update for BIND addresses six vulnerabilities, improving protection against potential issues such as memory overflow and DNSSEC validation bypass fo…
Debian LTS has issued an advisory addressing multiple vulnerabilities in bind9, potentially leading to denial of service, cache poisoning, and other security i…
A bugfix update for Mageia 10 resolves an issue where neochat would not start if the purpose package was not installed, by adding the necessary dependency.
