Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewa…
Fix for https://access.redhat.com/security/cve/cve-2026-16615
Fix for https://access.redhat.com/security/cve/cve-2026-16615
Listing network routes should tell administrators where traffic will go. An IPv6 security report instead shows Linux accessing a freed record used to keep trac…
Malware linked to break-ins at F5 BIG-IP Access Policy Manager appliances hides a PHP web shell in memory instead of in a file on disk, Sophos said in an analy…
A Linux server can be carefully hardened before it reaches production and still become less secure over time. Hardening means reducing unnecessary services, ac…
A Linux service may need broad system-call access while it starts, then only a smaller set while it handles requests. A single policy loaded before startup oft…
A moderate security update for Grafana on Rocky Linux 9 addresses privilege escalation and unauthorized access vulnerabilities, while also including various bu…
SUSE Linux Enterprise has released a security update addressing 18 vulnerabilities in the kernel, including fixes for issues related to memory leaks and out-of…
Cybersecurity researchers have found that several websites are still actively distributing a malware family known as Weedhack to gamers by masquerading as Mine…
The security update for SUSE Linux Enterprise 15 SP4 addresses 19 vulnerabilities, enhancing system security by fixing various issues including memory leaks an…
Code merged for the Linux 7.3 development cycle changes the measured boot evidence produced by the Integrity Measurement Architecture, or IMA. The kernel now r…
An update to AusweisApp2 version 2.5.5 is now available for Fedora 43, allowing online identification with German ID cards and providing access to stored data.
Debian has addressed two vulnerabilities in libnet-dns-perl that pose risks of denial of service and remote code execution, advising users to upgrade to versio…
SUSE has released a security update for helm, rebuilding it against the latest Go security release, affecting several SUSE Linux Enterprise products and access…
A security update for podman addresses two vulnerabilities in openSUSE Leap 15.3 and SUSE Enterprise Storage 7.1, allowing unauthorized host filesystem access …
Fedora released WordPress version 6.9.7, addressing multiple security vulnerabilities, including remote code execution, various XSS issues, privilege escalatio…
The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account published releases that …
In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who weren’t authorized …
Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Wor…
Multiple vulnerabilities in Bind9 affecting various Ubuntu LTS versions have been addressed, potentially allowing remote attacks leading to impersonation, deni…
Fedora has released an update for lemonldap-ng to version 2.23.3, fixing CVE-2026-19349, enhancing web SSO and access management functionality.
Rocky Linux 8 has an important security update for python3 due to a CVE vulnerability allowing directory access bypass, impacting the security of the Python ru…
The Fedora 43 update for libnfs version 6.0.2 addresses CVE-2026-57918 and CVE-2026-53689 vulnerabilities, improving security for accessing NFS shares over a n…
