Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Important: osbuild-composer security update
Important: python3.14-cryptography security update
Critical: 389-ds-base security, bug fix, and enhancement update
Important: skopeo security update
Important: git-lfs security update
Important: valkey security, bug fix, and enhancement update
Important: thunderbird security update
Moderate: glib2 security update
Moderate: expat security update
Moderate: xz security update
Important: opentelemetry-collector security update
Important: gpsd security update
Important: buildah security update
Important: kernel security, bug fix, and enhancement update
osbuild-composer security update
A newly confirmed Kestra vulnerability is being exploited in the wild. CISA added CVE-2026-49869 to its Known Exploited Vulnerabilities catalog on Sep 2, 2026,…
Virtualizor has confirmed that a BGP hijack redirected traffic for part of its update infrastructure and allowed an attacker-controlled server to deliver a mal…
A vulnerability in SPIP could allow unauthenticated remote code execution; it has been fixed in version 4.4.21+dfsg-0+deb13u1 for the stable distribution.
An update for python-sqlalchemy (2.0.52) includes bug fixes and enhancements for related packages, providing improved flexibility for SQL databases with a high…
A good ad blocker is one of those browser additions you stop noticing once it’s working. Pages settle down. Autoplay boxes disappear. News sites stop shifting …
A security update for Erlang has been released, addressing 19 vulnerabilities, including issues related to DNS cache poisoning, certificate forgery, and Denial…
When an authentication platform goes down, downstream applications go with it. Employees can't sign in, customers get locked out, and scheduled jobs quietly fa…
A vulnerability in SPIP could allow unauthenticated remote code execution; an update has been released for the stable distribution, and users are advised to up…
The security release of php-pear-PHP-CodeSniffer version 4.0.4 addresses vulnerabilities and improves error messages, tokenizer support for PHP 8.5, and overal…
