Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes two vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
An iOS hacker and cybersecurity researcher today publicly released what he claimed to be a "permanent unpatchable bootrom exploit," in other words, an epic jai…
An update that fixes two vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
Upstream details at : https://access.redhat.com/errata/RHSA-2019:2836
An anonymous hacker today publicly revealed details and proof-of-concept exploit code for an unpatched, critical zero-day remote code execution vulnerability i…
Major players within the tech industry have long-opposed the idea of government access to users' messages and chat conversations -- now they're continuing the …
My implicit presumption in this series is that break ins are unplanned, opportunistic occurrences.
CRYPTO-GRAM is a free monthly newsletter providing summaries, analyses, insights, and commentaries on computer security and cryptography. In this issue, Random…
Daniel Roberts discovered a binary named "ABfrag" on one of his servers after detecting suspicious network activity. He sent in a note requesting anyone with i…
Vendors have not issued updates yet for a vulnerability just reported by the Squid Project. "Under some conditions Squid may forward the proxy authentication c…
On Tuesday June 26, 2001, a hacker named 'ThePike' managed to deface the European defacement mirror Alldas.de. Visitors to the site saw a modified news banner …
In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a record is created or a case is updated, and the Flow passes data …
Update Django 5 to version 5.2.18 Fixes CVE-2026-77050 [low]: Potential denial-of-service vulnerability in get_supported_language_variant() Fixes CVE-2026-8442…
Update Django 5 to version 5.2.18 Fixes CVE-2026-77050 [low]: Potential denial-of-service vulnerability in get_supported_language_variant() Fixes CVE-2026-8442…
Update Django 6 to version 6.1.2 Fixes CVE-2026-77050 [low]: Potential denial-of-service vulnerability in get_supported_language_variant() Fixes CVE-2026-84429…
Debra Ahmed reports: An unprotected database linked to India-based AI software development and IT services company Vibetech exposed 13.7 million records contai…
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-s…
Cloud security for small business means protecting accounts, data, devices, and workloads while understanding which responsibilities belong to the provider. Mo…
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability,…
Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over. T…
Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating dist…
The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9.62 million) for illegally relaying Gri…
