Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
ConnectWise on Monday said it has taken remediation measures, including strengthening administrative-access protections and resetting accounts and replacing ap…
Two vulnerabilities were discovered in Django, the popular Python web-development framework. CVE-2026-77050 Potential denial-of-service vulnerability in get_su…
Security updates using git snapshot Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.…
Security updates using git snapshot Release 9.18 is end-of-life upstream. Apply security fixes including medium CVEs from somehow maintained git branch bind-9.…
Attackers broke into BeyondTrust Remote Support before a patch was ready, then left ways to return to the server.
WhatsApp argued that NSO Group violated a 2025 injunction against using the messaging app to spread spyware. A federal judge said WhatsApp hurt its case by not…
Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with conf…
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security brea…
Ahold Delhaize, the Dutch multinational grocery retailer, said Monday that a cyberattack forced it to take systems offline across most of its U.S. and European…
Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:…
The disruptions began Sunday, when users complained of difficulties loading news feeds, playing music and accessing other features of VK's platforms.
Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulne…
Update to version 0.10.1. This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in ru…
Update to version 3.15.2. Release notes since 3.13.3: https://aomedia.googlesource.com/aom/+/refs/tags/v3.14.0 https://aomedia.googlesource.com/aom/+/refs/tags…
Update to version 0.10.1. This includes a fix for a potential buffer overflow (assigned RUSTSEC-2026-0306). Rebuilds of affected applications are tracked in ru…
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers…
Update libheif to 1.23.6 Yet another security and bugfix release, see https://github.com/strukturag/libheif/releases/tag/v1.23.6
Update libheif to 1.23.6 Yet another security and bugfix release, see https://github.com/strukturag/libheif/releases/tag/v1.23.6
NY’s Attorney General and CT’s Attorney General held both a provider and its IT company liable for a data breach. The settlement also includes a corrective act…
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content ma…
The fix for CVE-2026-32316 in 1.6-2.1+deb12u2 stopped one string from growing past its limit, but repeating a string with * could still keep appending. A repea…
Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing …
Update to version 2.1.6. Release notes: https://github.com/syncthing/syncthing/releases/tag/v2.1.4 https://github.com/syncthing/syncthing/releases/tag/v2.1.5 h…
Update to version 2.1.6. Release notes: https://github.com/syncthing/syncthing/releases/tag/v2.1.4 https://github.com/syncthing/syncthing/releases/tag/v2.1.5 h…
