Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A buffer overflow flaw was discovered in Exim, a mail transport agent. A remote attacker can take advantage of this flaw to cause a denial of service, or poten…
libheif 1.4.0 has a use-after-free in heif::HeifContext::Image:: set_alpha_channel in heif_context.h because heif_context.cc mishandles references to non-exist…
Lilith of Cisco Talos discovered a buffer overflow flaw in the quota code used by e2fsck from the ext2/ext3/ext4 file system utilities. Running e2fsck on a mal…
A command injection vulnerability in Nokogiri allows commands to be executed in a subprocess by Ruby's `Kernel.open` method. For Debian 8 "Jessie", this proble…
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
This week, perhaps the most interesting articles include "Rumors of Third Vulnerability in Linux Kernel Prove Unfounded," "VLANs on Linux," and "Open Source Ge…
There is no doubt that the Internet has brought unparalleled connectivity to computers, especially in the last few years. But ironically, this very advantage h…
Fix for CVE-2026-67421 Security update: backport upstream RabbitMQ security fixes to 4.2.9. CVE-2026-67414: an authenticated AMQP 1.0 client could exhaust brok…
The US Cybersecurity and Infrastructure Security Agency (CISA) warned on Tuesday that hackers are now exploiting a high-severity Cisco BroadWorks vulnerability…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vul…
WordPress 6.9.11 Security Release Security updates included in this release A weakness in the WordPress upgrade process which can lead to remote code execution…
WordPress 6.9.11 Security Release Security updates included in this release A weakness in the WordPress upgrade process which can lead to remote code execution…
OpenAI on Thursday unveiled GPT‑6 Cyber, which it described as a major step forward in security research that brings together stronger cybersecurity capabiliti…
A browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person's computer, researchers at Forever Security, an endpoint s…
The US Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that attackers have started exploiting a recently patched high-severity …
A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin. The fla…
Security fix for CVE-2026-11940 Security fix for CVE-2026-15308
Security fix for CVE-2026-11940 Security fix for CVE-2026-15308
Maddie Baker reports: “Cybersecurity insurance normally covers compensation for costs arising from data breaches such as hacking, internally caused cyber leaks…
WordPress 7.1.3 Maintenance and Security Release Security updates included in this release A stored XSS on the Comments administration page, exploitable via pe…
Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Secu…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug that at…
Google on Wednesday took the wraps off Gemini 4 Carbon, its latest frontier model with state-of-the-art cybersecurity and long-horizon capabilities. "It shows …
