Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
# Security update for container-suseconnect Announcement ID: SUSE-SU-2026:2420-1 Release Date: 2026-06-16T14:05:08Z Rating: important References:
Cybersecurity researchers have flagged multiple ClickFix campaigns that deliver three malware loaders called BabaDeda Loader, Lorem Ipsum Loader, and Potemkin,…
# Security update for containerized-data-importer Announcement ID: SUSE-SU-2026:2407-1 Release Date: 2026-06-16T07:47:27Z Rating: important References:
A Fedora contributor account recently came under scrutiny for apparently AI-generated activity that disrupted the project's bug tracker.
Cybersecurity researchers have described what they say is a new class of attack that can trick artificial intelligence (AI) coding agents into running arbitrar…
A new analysis of The Gentlemen operation has revealed that the financially motivated threat group initially operated as an affiliate responsible for conductin…
The Vietnam-aligned threat actor known as OceanLotus has been attributed to two distinct campaigns that targeted domestic entities and stock investors with a b…
On June 9, Anthropic released Claude Fable 5, the most capable model it has ever made, generally available. It also did something unusual: it shipped one model…
IronWorm steals credentials and uses them to spread beyond the original victim, turning developer access into a supply chain risk.
Cybersecurity researchers have shed light on a macOS malvertising campaign codenamed Operation FlutterBridge that spreads a new backdoor called FlutterShell.Ac…
AI-driven exploitation timelines are rapidly shrinking, and they are not going to stop shrinking. Vulnerabilities are being discovered, reproduced, and weaponi…
Password manager Dashlane has disclosed that "fewer than" 20 users on the personal subscription plan had their encrypted vaults downloaded following a brute-fo…
Cybersecurity researchers have discovered a new malicious package on the npm registry that comes with information stealing capabilities.According to OX Securit…
Cybersecurity researchers have disclosed a security flaw in Gitea, an open-source, self-hosted platform for version control, that allows unauthenticated remote…
In yet another software supply chain attack, threat actors have compromised the popular GitHub Actions workflow, actions-cool/issues-helper, to run malicious c…
Rome, Italy, 13th May 2026, CyberNewswireRaccoonLine Shares Technical Overview of VLESS Protocol in New Engineering Explainer on Latest Hacking News | Cyber Se…
Agentic AI is already running in production environments across many organizations today. It is executing tasks, consuming data, and taking actions — most like…
Checkmarx has confirmed that a modified version of the Jenkins AST plugin was published to the Jenkins Marketplace."If you are using Checkmarx Jenkins AST plug…
A RCE (Remote Code Execution) escalation was discovered in Ruby on Rails, a MVC Ruby-based framework for web development. This vulnerability exists when using …
Linux has long carried a reputation for resilience, bolstered by open-source reviews, hardened kernels, and transparent development pipelines. While that trust…
A newly identified supply chain attack targeting DAEMON Tools software has compromised its installers to serve a malicious payload, according to findings from …
Linux security usually comes down to access controls and permissions, but those controls only work if the platform enforcing them holds up. What happens when t…
An update that solves 177 vulnerabilities, contains two features and has 28 fixes can now be installed.
Cybersecurity researchers have warned of malicious images pushed to the official "checkmarx/kics" Docker Hub repository.In an alert published today, software s…
