Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple vulnerabilities were fixed in PostgreSQL, a popular database. CVE-2026-2003 Fix CVE-2026-2003: Improper validation of type "oidvector" in PostgreSQL a…
Two security vulnerabilities were discovered in Valkey, a persistent key-value database with network interface, which could result in denial of service or data…
n8n (CVE-2025-68613) is an open-source automation tool used to connect APIs, databases, and SaaS apps into workflows. It is commonly used to move data between …
n8n (CVE-2025-68613) is an open-source automation tool used to connect APIs, databases, and SaaS apps into workflows. It is commonly used to move data between …
It was discovered that the parse_options_header() function of multipart, a Python multipart/form-data parser was susceptible to denial of service via malformed…
A threat actor known as UNC6426 leveraged keys stolen following the supply chain compromise of the nx npm package last year to completely breach a victim's clo…
Privacy and security have never been more important—or more under threat. With headlines constantly reporting data breaches, hacks, and the unchecked collectio…
Ever wonder how some IT teams keep corporate data safe without slowing down employees? Of course you have.Mobile devices are essential for modern work—but with…
Security doesn’t fail at the point of breach. It fails at the point of impact. That line set the tone for this year’s Picus Breach and Simulation (BAS) Summit,…
In the era of rapidly advancing artificial intelligence (AI) and cloud technologies, organizations are increasingly implementing security measures to protect s…
E-commerce businesses live and die by trust. A single data breach, a few minutes of downtime during peak traffic, or failure to meet compliance can sink custom…
Most enterprise workloads already run on Linux. The databases, APIs, and tools that drive daily operations live there. AI models, however, are often limited to…
Picture this: Your team rolls out some new code, thinking everything's fine. But hidden in there is a tiny flaw that explodes into a huge problem once it hits …
A flaw was found in how GLib¢''s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause …
The audiofile library allows the processing of audio data to and from audio files of many common formats (currently AIFF, AIFF-C, WAVE, NeXT/Sun, BICS, and raw…
Cybersecurity researchers have exposed a previously unknown threat actor known as Water Curse that relies on weaponized GitHub repositories to deliver multi-st…
Cybersecurity researchers have exposed a previously unknown threat actor known as Water Curse that relies on weaponized GitHub repositories to deliver multi-st…
It is necessary to back up Proxmox virtual machines (VM) to avoid data loss in any scenario, including hardware failure, software issues, or human error. When …
One of the most important responsibilities of any organization's IT team is to make sure that its digital assets are kept secure. Data breaches can result in m…
This past weekend, the globally recognized Common Vulnerabilities and Exposures (CVE) database, essential for tracking security flaws in software and systems, …
Bing Shi discovered that GnuTLS, a portable library which implements the Transport Layer Security and Datagram Transport Layer Security protocols, had ineffici…
When an input DER data contains a large number of SEQUENCE OF or SET OF elements, decoding the data and searching a specific element in it take quadratic time …
Ransomware attacks have reached an unprecedented scale in the healthcare sector, exposing vulnerabilities that put millions at risk. Recently, UnitedHealth rev…
Cybersecurity researchers have identified three sets of malicious packages across the npm and Python Package Index (PyPI) repository that come with capabilitie…
