Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A security update for glib2 addresses six vulnerabilities, enhancing the security of various SUSE products and improving protection against potential out-of-bo…
SUSE released an important security update for Linux Kernel, addressing 87 vulnerabilities including CVEs related to memory management and network protocols, w…
A security update for SVT-AV1, libyuv0, and libaom3 addresses multiple vulnerabilities, allowing potential memory corruption and remote code execution, requiri…
Ubuntu Security Notice USN-8598-1 addresses vulnerabilities in rsyslog affecting multiple versions of Ubuntu, which could allow remote attackers to cause denia…
Mageia released updates for dnsmasq to fix critical security vulnerabilities, including a heap-based buffer overflow and an out-of-bounds read, potentially ena…
Ubuntu released a security notice addressing multiple vulnerabilities in the Linux kernel affecting Ubuntu 20.04 LTS, necessitating immediate updates and poten…
Ubuntu Security Notice USN-8596-1 details several security vulnerabilities in the Linux kernel affecting Ubuntu 22.04 and 24.04, requiring immediate system upd…
Zimbra has rolled out fixes to address multiple critical security issues, including a command injection flaw in the Simple Network Management Protocol (SNMP) m…
Backport fixes for CVE-2026-48858 (ftp SSRF), CVE-2026-49759 (SCTP DoS), CVE-2026-48860 (dist-over-TLS auth bypass), CVE-2026-54886 (ssh SFTP DoS), CVE-2026-54…
Backport fixes for CVE-2026-48858 (ftp SSRF), CVE-2026-49759 (SCTP DoS), CVE-2026-48860 (dist-over-TLS auth bypass), CVE-2026-54886 (ssh SFTP DoS), CVE-2026-54…
Before the week gets away from you, take a look at what's landed across the Linux ecosystem. The volume of security advisories hasn't slowed, and while not eve…
Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already exploiting. The release covers 622 of …
We often view OpenSSH security updates through the lens of standard patch management. When a new CVE hits, we scramble to update, check our versions, and retur…
Linux security teams are drowning. Patches, kernel updates, new CVEs every week. SSH exposed here, an old web service there, and a forgotten cron job running a…
The critical libssh2 CVE-2026-55200 flaw inverts SSH security: the remote server attacks the connecting client, no credentials needed. A public PoC is out and …
This week was a reminder that attackers do not always need big tricks. One small mistake, one old access path, one missed patch, and suddenly the door is open.…
AI is beginning to reshape how penetration testing workflows are organized. For years, the penetration tester’s workflow has been a labor-intensive ritual: sca…
AI is beginning to reshape how penetration testing workflows are organized. For years, the penetration tester’s workflow has been a labor-intensive ritual: sca…
Multiple security vulnerabilities were discovered in libssh2, a client-side C library implementing the SSH2 protocol which could result in memory disclosure, d…
Ubuntu security notice USN-8472-1 addresses multiple vulnerabilities in containerd affecting various releases, allowing potential denial of service and arbitra…
Ubuntu issued a security notice regarding vulnerabilities in the Linux kernel affecting Ubuntu 22.04 LTS and 20.04 LTS, requiring updates and potential recompi…
For those of us who live and breathe Linux and open-source infrastructure, the "management plane" is usually just a collection of familiar tools—SSH, APIs, and…
Ubuntu Security Notice USN-8423-1 addresses several vulnerabilities in lwIP affecting various Ubuntu versions, with serious risks including buffer overflows an…
A security researcher found a flaw in Anthropic's Claude Code GitHub Action that let an attacker take over vulnerable public repositories running it, with noth…
