Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised …
Rescana’s new report on a breach affecting the Denmark Central Person Register (CPR) summarizes the situation: On October 5, 2026, Danish authorities publicly …
Seen on Homeland Security Today: FBI and US Coast Guard investigators have found evidence that hackers accessed the propulsion system of an oil supertanker as …
Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently reported initial acc…
An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on September…
The Iran-linked "hacktivist" persona known as Handala Hack has been attributed to a Telegram-based surveillance backdoor called HEAVYGRAM and a Delphi-based ut…
N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication f…
Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewa…
SUSE Linux Enterprise has released a security update addressing 18 vulnerabilities in the kernel, including fixes for issues related to memory leaks and out-of…
The security update for SUSE Linux Enterprise 15 SP4 addresses 19 vulnerabilities, enhancing system security by fixing various issues including memory leaks an…
A security update for podman addresses two vulnerabilities in openSUSE Leap 15.3 and SUSE Enterprise Storage 7.1, allowing unauthorized host filesystem access …
The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account published releases that …
Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Wor…
Ubuntu released security updates for libgit2 addressing multiple vulnerabilities that could allow remote code execution, denial of service, and credential leak…
A security update for SUSE Linux addresses 59 vulnerabilities, including fixes for memory leaks, out-of-bounds access, and potential crashes, urging immediate …
Not every security incident begins with sophisticated malware or a compromised server. Sometimes it is nothing more than a developer pushing code before the en…
The INC Ransomware operation has emerged as the "dominant threat actor" exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access (SMA…
upower 1.91.3: Feature: up-device-battery: Prefer "Standard" over "Fast" charging (!316 (merged), #344 (closed)) Fix: Resolve potential leaks (!327 (merged)) F…
A compromised Linux server can continue running malware long after the initial intrusion. One of the most common persistence techniques is a malicious cron job…
GitHub on Tuesday said it's investigating unauthorized access to its internal repositories after the notorious threat actor known as TeamPCP listed the platfor…
Cybersecurity researchers have disclosed details of a stealthy Python-based backdoor framework called DEEP#DOOR that comes with capabilities to establish persi…
Everything is dumb again. This week feels broken in a very familiar way. Old tricks are back. New tools are doing shady crap. Supply chains got hit. Fake help …
A pro-Ukrainian hacktivist group called PhantomCore has been attributed to attacks actively targeting servers running TrueConf video conferencing software in R…
Cybersecurity researchers have disclosed a security "blind spot" in Google Cloud's Vertex AI platform that could allow artificial intelligence (AI) agents to b…
