Stay Informed

Cybersecurity News

Home / News

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

BeyondTrust — CVE-2026-102764

Vulnerability Critical

BeyondTrust Remote Support: a zero-day exploited since August lets attackers take over the appliance without an account

BeyondTrust has fixed CVE-2026-102764, a critical flaw in Remote Support that lets an attacker with no account perform file operations on the appliance. According to Google and Ma…

BeyondTrustRemote accessLinux

Ivanti Connect Secure — CVE-2026-104935

Vulnerability Critical

Ivanti Connect Secure: zero-day chain exploited for root access, one of three flaws still unpatched

Attackers chained three unknown flaws in Ivanti Connect Secure VPN appliances to run commands as root without logging in, then harvested Active Directory credentials. Ivanti fixed…

IvantiVPNActive Directory

Atlassian Data Center — CVE-2026-21589

Vulnerability High

Atlassian Data Center: critical flaw lets anyone read files on Jira, Confluence and Bitbucket servers

Atlassian disclosed on 5 October 2026 CVE-2026-21589 (CVSS 9.3), a path traversal flaw in eight self-hosted products, including Jira, Confluence and Bitbucket Data Center. No logi…

AtlassianJiraConfluence

Microsoft Exchange — CVE-2026-96940

Vulnerability High

Microsoft Exchange: one stolen account is enough to read every mailbox — install the out-of-band fix

CVE-2026-96940 (CVSS 8.8) lets any authenticated user of an on-premises Exchange server read other people’s mail and attachments in the same organisation. Microsoft shipped an out…

ExchangeWindows

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian LTS Redis Remote Code Execution Issues DLA-4682-1

It was discovered that there were two issues in Redis, the in-memory key/value database: CVE-2026-23631 An authenticated attacker could have exploited the mast…

Linux Databases

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE libaom Important Remote Code Execution Issues SUSE-SU-2026-2829-1

An update that solves four vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE libaom Important Remote Code Execution Buffer Overflow 2026-2829-1

An update that solves four vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Dracut Major Remote Code Execution Resolution 2026-2803-1

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 26.04 LTS mailcap Critical Remote Code Execution USN-8518-1

mailcap could allow applications to escape sandbox restrictions

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Debian LTS dpkg Severe Directory Access Permissions DoS Concern DLA-4673-1

A vulnerability have been discovered in dpkg, the Debian package manager (dpkg is the low-level tool that actually installs or removes packages). CVE-2025-6297…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux mariadb10.11 Critical Remote Code Execution RLSA-2026-33093

Important: mariadb10.11 security, bug fix, and enhancement update

Linux Databases

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux perl-IO-Compress Critical Remote Code Execution RLSA-2026-30860

Important: perl-IO-Compress security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux perl-IO-Compress Severe Remote Code Execution RLSA-2026-30860

Important: perl-IO-Compress security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Mageia yt-dlp Important Issues CVE-2026-50019 Remote Code Execution

Security update

The Hacker News

The Hacker News Breaches & leaks

Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials

Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vulnerability to obtain initial …

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Glycin-loaders Moderate Out-of-Bounds Access Threat 2026-22302-1

An update that solves two vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE LibAOM Important Buffer Overflow Remote Code Execution 2026-22369-1

An update that solves four vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 2026-2720-1 dracut Important Remote Command Injection Risk

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed Alloy Moderate Access Fix CVE-2026-10722 2026-11165-1

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 8 PHP Critical Remote Code Execution XSS RLSA-2026-34354

Important: php:7.4 security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE cifs-utils Important Local Access Escalation Vulnerability 2026-2700-1

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux pandoc Critical Remote Code Execution Patch RLSA-2022-5597

Important: pandoc security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Breaches & leaks

openSUSE 2026-2681-1 libheif Moderate Information Leak and Root Access

An update that solves two vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Firewalld Moderate D-Bus Local Access Issue 2026-22263-1

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 openbao 2.5.5 Important CVE-2026-55770 Access Control Update

Update to upstream 2.5.5. Also fixes CVE-2026-55770, CVE-2026-55774, CVE-2026-55775, and CVE-2026-55776.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux 8 Pandoc Important Remote Code Execution Vulnern RLSA-2022-5597

Important: pandoc security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux flac Important Remote Code Execution Fix RLSA-2023-5048

Important: flac security update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Rocky Linux flac Important Remote Code Execution Vuln RLSA-2023-5048

Important: flac security update