Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language, which could result in in denial of service, informati…
Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks…
Automatic update for cockpit-machines-357-1.fc43. Changelog for cockpit-machines * Wed Sep 23 2026 Packit - 357-1 - Harden against local attacks from accessing…
Update to 1.26.1 (rhbz#2535076) Security fix list from upstream: Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code Execution when digesting DNS…
Automatic update for cockpit-machines-357-1.fc44. Changelog for cockpit-machines * Wed Sep 23 2026 Packit - 357-1 - Harden against local attacks from accessing…
Apache disclosed CVE-2026-94250 on October 1, 2026, warning that public access to a batch-request endpoint can let an attacker exhaust a gateway worker's memor…
LightLLM, software used to serve AI models, can expose Linux AI servers to remote code execution when operators enable its profiling mode, a tool for measuring…
Plasma Workspace could allow unintended access to user sessions.
Booth could allow unintended access to network services.
The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party security product the e…
An issue has been found in evolution-data-server, an evolution database backend server. A Flatpak application with D-Bus access to the addressbook service can …
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service, information d…
It was discovered that there were two vulnerabilities in the Redis key/value database. CVE-2026-81934 CVE-2026-81934: Prevent a use-after-free vulnerability in…
Update to 1.26.1 (rhbz#2535076) Security fix list from upstream: Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code Execution when digesting DNS…
Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently reported initial acc…
Google's Gemini model has become the latest artificial intelligence (AI) system to access the internet and break into other companies during a cybersecurity ev…
An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on September…
Attackers are exploiting a critical Cisco ISE flaw that can open the product’s web management interface without a valid login. Cisco disclosed CVE-2026-76460 o…
The Iran-linked "hacktivist" persona known as Handala Hack has been attributed to a Telegram-based surveillance backdoor called HEAVYGRAM and a Delphi-based ut…
Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC validator, maintainer NLnet Labs said in an advisory on Wedn…
N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication f…
SMB, or Server Message Block, lets Linux systems access files shared over a network.
Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing by silently dropping …
On September 10, 2026, Wiz Research reported that multiple attackers had chained two Artifactory vulnerabilities against self-hosted repositories. One flaw gav…
