The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments.…
Security update: - RCE via OOM corruption, CVE-2026-109618 - RCE via stale global state, CVE-2026-109619
Update to the latest upstream release, which has security fixes for CVE-2026-102483 CVE-2026-102484 CVE-2026-102485 CVE-2026-102486.
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable ser…
Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the B…
A remote attacker who has not logged in can crash many HTTP/3 web servers with a single connection, security firm FoxIO disclosed, releasing working proof-of-c…
Security update
Important: php security update
Critical: .NET 9.0 security, bug fix, and enhancement update
Critical: .NET 10.0 security, bug fix, and enhancement update
Important: golang security, bug fix, and enhancement update
Critical: .NET 9.0 security, bug fix, and enhancement update
flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac s…
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Several security issues were fixed in c-ares.
An update that solves one vulnerability and has one security fix can now be installed.
An update that solves three vulnerabilities and has one security fix can now be installed.
An update that solves three vulnerabilities and has one security fix can now be installed.
Several security issues were fixed in Ghostscript.
Security update: - RCE via OOM corruption, CVE-2026-109618 - RCE via stale global state, CVE-2026-109619
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …