The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A "coordinated developer-targeting campaign" is using malicious repositories disguised as legitimate Next.js projects and technical assessments to trick victim…
An update that solves two vulnerabilities, contains three features and has 20 security fixes can now be installed.
Update uv and python-uv-build to 0.10.2. There are some minor breaking changes in uv; most users should not have to change anything. See https://github.com/ast…
An update that solves two vulnerabilities and contains two features can now be installed.
This backports fixes for a couple CVEs: ** libgnutls: Fix NULL pointer dereference in PSK binder verification A TLS 1.3 resumption attempt with an invalid PSK …
An update that fixes one vulnerability is now available.
An update that solves four vulnerabilities, contains two features and has one fix can now be installed.
Titouan Lazard discovered a buffer overflow vulnerability in munge, an authentication service to create and validate credentials, which may allow local users t…
An update that solves two vulnerabilities and contains one feature can now be installed.
Multiple vulnerabilities has been discovered in libmatio, a MAT File I/O Library. CVE-2025-50343 A Denial of Service (DoS) and in certain cases heap corruption…
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which may result in denial of service, information leaks, or potentia…
An update that contains one feature can now be installed.
An update that solves 395 vulnerabilities, contains 29 features and has 43 security fixes can now be installed.
An update that solves 221 vulnerabilities, contains two features and has 37 security fixes can now be installed.
An update that contains one feature can now be installed.
An update that fixes one vulnerability is now available.
An update that fixes three vulnerabilities is now available.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday said it's retiring 10 emergency directives (Eds) that were issued between 2019 and…
The U.S. Federal Bureau of Investigation (FBI) on Thursday released an advisory warning of North Korean state-sponsored threat actors leveraging malicious QR c…
Open-source workflow automation platform n8n has warned of a maximum-severity security flaw that, if successfully exploited, could result in authenticated remo…
An update that fixes 8 vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes 14 vulnerabilities is now available.