Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlie…
Two vulnerabilities were discovered in aide, an advanced intrusion detection system, which could allow a local user to bypass the detection of malicious files.…
Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero…
The webkit2gtk update released as DSA-6534-1 introduced a regression that prevents Evolution from displaying images embedded in HTML emails. For the stable dis…
Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal sys…
LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package contai…
Moderate: fetchmail security update
A flaw in Kiro Crew, an open-source AI assistant, could let someone in a WhatsApp chat make the assistant carry out tasks on its owner’s computer.
The pair stressed the latest update showed no country is pursuing the technically challenging effort to interfere with or hack into the country’s election infr…
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according…
An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little setup. Sure, the model writes the attacks. But everythi…
State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it d…
fetchmail security update
A Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in with almost no help, and a security researcher watched it ha…
Simone Kraus writes: On October 9, 2026, Reuters introduced the world to Adem El Adeb, a 19-year-old so called former cybercriminal known as Pryx, who claimed …
Jenny Lee reports: The Trump administration banned Chinese AI startup DeepSeek from civilian U.S. government agencies, citing security concerns. The Department…
WhatsApp's help pages carried hidden instructions for its support chatbot that told it not to recommend a data protection authority or regulator to users who c…
The Russian group known as APT28 and Fancy Bear used a recently documented backdoor to dwell in the networks of two defense contractors and a law enforcement a…
An artificial intelligence (AI) scanner helped find 28 security flaws in Apache Camel that led to fixes.
ConnectWise initially said on Friday that it was investigating “attempts of unauthorized access associated with the ConnectWise Cloud Backup environment,” and …
Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage.…
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security brea…
A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretex…
Microsoft has confirmed that this month's Windows Server security updates are causing OWA sign-in and mail delivery issues on some Exchange Server systems.…
