Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Linux Audit can tell defenders that a system call ran while leaving out the setting that explains what the call did.
A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets, source code, and customer data without eve…
SUSE released a moderate security update for containerd addressing CVE-2026-35469, which fixes a memory amplification vulnerability that could cause a denial o…
A macOS ClickFix operation spanning more than 250 front-end domains now fingerprints visitors before deciding whether to show them a malware lure, a change Mic…
A security update for containerd addresses four vulnerabilities, including a significant denial of service risk, affecting various SUSE Linux Enterprise produc…
SUSE has released a security update for apptainer addressing two vulnerabilities, CVE-2026-39821 and CVE-2026-56852, affecting multiple SUSE products, with ins…
A security update for apptainer addresses two vulnerabilities, fixing issues with privilege escalation and handling invalid UTF-8 input, applicable to several …
An important security update for openSUSE Leap 16.0 addresses two vulnerabilities in apptainer, improving functionality and fixing issues related to file owner…
Las Vegas, USA, 29th July 2026, CyberNewswireSweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities on Latest Hacking …
Anthropic says Claude Mythos Preview helped derive an end-to-end key-recovery attack against HAWK-256 and a 200- to 800-fold speedup for an attack on seven-rou…
SUSE released an important security update for python-aiohttp, addressing eight vulnerabilities that may lead to resource exhaustion, DoS attacks, and cookie h…
SUSE has released a security update for containerd addressing four vulnerabilities, including a denial of service issue in SPDY frame parsing for SUSE Linux Mi…
For decades, Linux defenders relied on a comfortable assumption: a public security patch did not imply an imminent vulnerability. While open-source openness ma…
A malvertising operation dubbed SourTrade is making victims' browsers build the final Windows executable themselves, using a legitimate Bun runtime as its base…
Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applica…
SUSE released a security update for python-aiohttp addressing 19 vulnerabilities, including memory usage issues and denial of service risks across multiple SUS…
AI security agents are starting to influence real security decisions. They summarize findings, prioritize remediation, recommend next steps, and help teams mov…
Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code e…
Rebuild with newer golang toolchain
Rebuild with newer golang toolchain
A technical walkthrough of the kerberoasting attack: the Kerberos quirk it abuses, RC4 vs AES, and how to detect and fix it in Active Directory.Kerberoasting A…
Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer's computer. The …
mailcap could allow applications to escape sandbox restrictions
Adobe frames the fast exploitation of its ColdFusion vulnerabilities as an attacker speed problem. The real issue is a connector that never should have trusted…
