Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A security update is available for Node.js on Rocky Linux 8, addressing vulnerabilities leading to denial of service across various modules, with detailed CVSS…
An important update for Grafana on Rocky Linux 8 addresses a denial of service vulnerability and includes bug fixes and enhancements, with detailed CVSS rating…
Fedora has released an update for opkssh version 0.16.0, fixing a security vulnerability in GQ-commitment PK Tokens, while updating dependencies and maintainin…
A critical kernel security update for Rocky Linux 8 addresses multiple vulnerabilities, including fixes for out-of-bounds and double-free issues, with detailed…
Fedora 44 has updated the rust-libgit2-sys package to version 0.18.7, addressing several security vulnerabilities while maintaining compatibility with system P…
A security update for Mozilla Firefox addresses 32 vulnerabilities, enhancing protection for various SUSE Linux Enterprise products, critical for maintaining s…
A critical update for .NET 8.0 on Rocky Linux 8 addresses multiple security vulnerabilities and includes bug fixes, with detailed CVSS ratings available for ea…
An important update for Rocky Linux 9 addresses kernel security vulnerabilities and includes bug fixes and enhancements, with detailed severity ratings availab…
Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, wh…
The 7.1.4-102/202 stable kernel updates contain a few important fixes across the tree. The 7.1.4-101/201 stable kernel update contains a fix for a rather impor…
The 7.1.4-102/202 stable kernel updates contain a few important fixes across the tree. The 7.1.4-101/201 stable kernel update contains a fix for a rather impor…
GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Lin…
The industry spent the initial months after Anthropic's April 7 Mythos reveal focused on volume. How many new CVEs would Mythos add to an already overloaded pi…
North Korean threat actors linked to the Contagious Interview campaign have been observed employing steganography in SVG image files to conceal malicious paylo…
Cybersecurity researchers have discovered a previously undocumented malware called GoSerpent that has been put to use in cyber attacks targeting entities in So…
More than 20 Brazilian government websites were hijacked and turned into malware delivery channels in an active PhantomEnigma campaign uncovered by ANY.RUN, a …
Before the week gets away from you, take a look at what's landed across the Linux ecosystem. The volume of security advisories hasn't slowed, and while not eve…
When researchers announced GhostLock, many people focused on the exploit. What stood out to me wasn't just what the vulnerability could do, but how long it had…
Most of us don't hear about a kernel vulnerability until a CVE lands in our inbox or the vulnerability scanner starts complaining. By then, the patch isn't new…
The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) has designated two individuals and a VPN service provider for enabling ransomware actors…
A Chinese threat actor tracked as UAT-7810 is actively refining its bespoke malware to expand its Operational Relay Box (ORB) network by breaking into internet…
A flaw was found in Sympa’s web interface, a modern mailing list manager. An attacker may bypass authentication by using an arbitrary e-mail address when the g…
Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in P…
Over the span of just 14 days, threat actors unleashed more than 81 million login attempts against Microsoft’s Azure command-line interface (CLI). The campaign…
