Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A privilege escalation flaw has been demonstrated in Windows Server 2025 that makes it possible for attackers to compromise any user in Active Directory (AD)."…
Recent research on Samba Active Directory (AD) implementations has revealed a critical vulnerability that allows attackers to gain elevated privileges and seiz…
A recently patched high-severity flaw impacting SolarWinds Serv-U file transfer software is being actively exploited by malicious actors in the wild.The vulner…
The recently disclosed critical security flaw impacting Apache ActiveMQ is being actively exploited by threat actors to distribute a new Go-based botnet called…
Given the continuous rise in active exploitation of the now-known CitrixBleed flaw, governments issued new…New Alerts Issued For CitrixBleed Flaw Following Act…
The Kinsing threat actors are actively exploiting a critical security flaw in vulnerable Apache ActiveMQ servers to infect Linux systems with cryptocurrency mi…
Days after back-to-back disclosures about actively exploited zero-day vulnerabilities, Cisco has finally patched them with…Patches Released For The Actively Ex…
The recently patched TeamCity RCE flaw is now under active attack by numerous ransomware gangs.…TeamCity RCE Flaw Actively Exploited To Deploy Ransomware on La…
Months after patching the vulnerabilities, researchers still detected active exploitation of Adobe ColdFusion for malware…Active Exploitation Of Adobe ColdFusi…
Zimbra recently addressed a severe zero-day vulnerability found actively exploited in the wild. While the…Zimbra Patched An XSS Zero-Day Vulnerability Under Ac…
A zero-day vulnerability in the WPGateway WordPress plugin recently surfaced online following active exploits. The…Actively Exploited Zero-Day Vulnerability Fo…
Heads up, Android users. A new zero-day is under active exploitation in the wild targeting…Now-Patched Android Zero-Day Actively Exploited For Targeted Attacks…
Oracle alerts users to update their systems at the earliest as they spot active exploitation of recently patched WebLogic bug.Oracle Alerts Users About Active …
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active…
Apache’s release notice on Oct 3, 2026 lists six Apache Directory LDAP API vulnerabilities.
Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and r…
An important security update for Python 3.12 on Rocky Linux 10 addresses a vulnerability allowing directory bypass during tarfile extraction, with a CVSS score…
The Fedora 43 update for rust-git-interactive-rebase-tool links applications to an updated libgit2 library, addressing several security vulnerabilities from th…
The Fedora update for rust-git-interactive-rebase-tool includes a rebuild with the latest libgit2-sys crate, addressing multiple security vulnerabilities from …
CVE-2026-16232 lets an unauthenticated attacker seize full admin control of Check Point's management console. Check Point confirms in-the-wild attacks, and a R…
A significant security update is available for plexus-utils on Rocky Linux 9, addressing a directory traversal vulnerability (CVE-2025-67030) with a CVSS score…
Kate Deplaix reported that .install file directives were insufficiently restricted in OPAM, a package manager for OCaml. Installing files through .install file…
Kate Deplaix reported that .install file directives were insufficiently restricted in OPAM, a package manager for OCaml. Installing files through .install file…
A vulnerability have been discovered in dpkg, the Debian package manager (dpkg is the low-level tool that actually installs or removes packages). CVE-2025-6297…
