Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol d…
Colombia’s largest health-promoting entity, Nueva EPS, has allegedly been hacked by an individual demanding $15 million not to leak the data. Colombia’s health…
Takashi Nakamichi and Ryo Horiuchi report that Daiwa Securities, Japan’s second-largest brokerage and investment banking firm, is responding to a breach at one…
Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and each other securely. GitGuardian he…
Featuring:Cybersecurity is being reshaped by the expansion of cloud infrastructure, AI, distributed systems, and increasingly complex digital environments. As …
Automatic update for cockpit-machines-357-1.fc43. Changelog for cockpit-machines * Wed Sep 23 2026 Packit - 357-1 - Harden against local attacks from accessing…
Multiple vulnerabilities were discovered in Redis, a persistent key-value database, which could result in denial of service or the execution of arbitrary code.…
Multiple vulnerabilities were discovered in libio-compress-perl, a Perl library to allow reading and writing of compressed data. CVE-2025-15649 Uncaught except…
Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of stealing data from organi…
Several vulnerabilities have been discovered in the WebKitGTK web engine, that may lead to heap corruption, local privilege escalation, remote code execution, …
Multiple vulnerabilities were discovered in Django, the Python-based web development framework: CVE-2026-48587 Potential exposure of private data via whitespac…
Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too. Most breaches today begin in a browse…
1.036 bump - Fix CVE-2026-93019 (TGA large color map size interpreted as negative) - Fix CVE-2026-93018 (paletted images: out-of-range color index returned uni…
1.036 bump - Fix CVE-2026-93019 (TGA large color map size interpreted as negative) - Fix CVE-2026-93018 (paletted images: out-of-range color index returned uni…
Catalyst::Plugin::Static::Simple for Perl sets the Cache‑Control header to "public" for every static asset served. Consequently, intermediaries such as shared …
Catalyst::Plugin::Static::Simple for Perl sets the Cache‑Control header to "public" for every static asset served. Consequently, intermediaries such as shared …
Catalyst::Plugin::Static::Simple for Perl sets the Cache‑Control header to "public" for every static asset served. Consequently, intermediaries such as shared …
Two Linux fixes show how extended Berkeley Packet Filter (eBPF) security can fail when mutable map data crosses into the exec path, where Linux starts a progra…
Vulnerabilities were discovered in libdbi-perl, the Perl Database Interface (DBI), which may lead to memory corruption, denial of service, or arbitrary module …
Applications using libpcap could be made to crash if given specially crafted data.
Update to 3.62.0 evolution-data-server Bug Fixes: I#660 - GOA EWS: Do not require OABUrl in autodiscover I#662 - EBackend: Document how OAuth2 sources should a…
Update to 3.62.0 evolution-data-server Bug Fixes: I#660 - GOA EWS: Do not require OABUrl in autodiscover I#662 - EBackend: Document how OAuth2 sources should a…
A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker's server, Cisco Talos said on Septembe…
Cybersecurity researchers have disclosed details of a malicious npm package named "tw-pkgprobe-7731" that masquerades as a security tool targeting developers i…
