Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
UpGuard provides another entry for our “No need to hack when it’s leaking” files. This time, it’s Liberating Research. On August 31, Greg Pollock from UpGuard …
Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw fo…
In environments studied for the 2026 State of Agent Security Report, roughly 1,280 third-party products now embed AI. About 282 of them sit behind single sign-…
SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company's network and applications.…
A report by a Labour MP and an academic argues that if the British public cannot see what Russian activity costs, it cannot weigh that burden against the cost …
In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol d…
Several vulnerabilities were discovered in node-lodash, a Node.js module providing utility functions for common programming tasks. CVE-2025-13465 Prototype pol…
Justin Doubleday reports: The Department of Homeland Security is preparing this year to award a major cloud, cybersecurity and network services contract aimed …
It was discovered that incomplete validation of MS-PPPE packets in radsecproxy, a Radius protocol proxy, could result in denial of service or potentially the e…
Several vulnerabilities have been discovered in the WebKitGTK web engine, that may lead to heap corruption, local privilege escalation, remote code execution, …
parted: Fix partition number allocation in do_print (bcl) fdasd: Make sure data set name is positive (bcl) resize: Make sure hfsc_new_cachetable cannot overflo…
Catalyst::Plugin::Static::Simple for Perl sets the Cache‑Control header to "public" for every static asset served. Consequently, intermediaries such as shared …
Catalyst::Plugin::Static::Simple for Perl sets the Cache‑Control header to "public" for every static asset served. Consequently, intermediaries such as shared …
FreeIPA 4.13.4 security release Upstream release notes: https://www.freeipa.org/release-notes/4-13-4.html
Catalyst::Plugin::Static::Simple for Perl sets the Cache‑Control header to "public" for every static asset served. Consequently, intermediaries such as shared …
A domain used as harmless placeholder text showed up in roughly 1,700 repositories. Then somebody registered it and started serving malicious lures. That is th…
Several vulnerabilities have been discovered in OpenSSL, a Secure Socket Layer toolkit providing the SSL and TLS cryptographic protocols for secure communicati…
Multiple vulnerabilities were found in memcached, high-performance in-memory object caching system. CVE-2023-46852 a buffer overflow exists when processing mul…
FreeIPA 4.13.4 security release Upstream release notes: https://www.freeipa.org/release-notes/4-13-4.html
Multiple issues were found in libde265, an open source implementation of the H.265 video codec, which potentially may result in denial of service, heap/buffer …
Multiple vulnerabilities has been found in libevent, an event notification library. CVE-2026-63379 (GHSA-2gmv-p5m7-98p6) Sebastianosrt discovered that libevent…
parted: Fix partition number allocation in do_print (bcl) fdasd: Make sure data set name is positive (bcl) resize: Make sure hfsc_new_cachetable cannot overflo…
Attackers are exploiting a critical Cisco ISE flaw that can open the product’s web management interface without a valid login. Cisco disclosed CVE-2026-76460 o…
The Iran-linked "hacktivist" persona known as Handala Hack has been attributed to a Telegram-based surveillance backdoor called HEAVYGRAM and a Delphi-based ut…
