Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The Linux Foundation has officially launched Akrites, a coordinated industry initiative designed to improve how critical open source vulnerabilities are valida…
Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution.Steer t…
Cybersecurity researchers have discovered a remote denial-of-service exploit that affects major web servers, including NGINX, Apache HTTPD, Microsoft IIS, Envo…
Cybersecurity researchers have disclosed details of a now-patched bug impacting Open VSX's pre-publish scanning pipeline to cause the tool to allow a malicious…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has urged government agencies to apply patches for two security flaws impacting Synacor Zimbra…
It's Patch Tuesday, which means a number of software vendors have released patches for various security vulnerabilities impacting their products and services.M…
This week saw a lot of new cyber trouble. Hackers hit Fortinet and Chrome with new 0-day bugs. They also broke into supply chains and SaaS tools. Many hid insi…
A recently patched security flaw in Microsoft Windows Server Update Services (WSUS) has been exploited by threat actors to distribute a malware known as Shadow…
* bsc#1233072 * bsc#1237048 * bsc#1240744 * bsc#1243650 * bsc#1245509
* bsc#1237048 * bsc#1240744 * bsc#1243650 * bsc#1245509 * bsc#1247315
* bsc#1237048 * bsc#1240744 * bsc#1243650 * bsc#1247315
* bsc#1233072 * bsc#1237048 * bsc#1240744 * bsc#1243650 * bsc#1247315
* bsc#1240744 * bsc#1243650 * bsc#1247315 Cross-References:
* bsc#1233072 * bsc#1237048 * bsc#1240744 * bsc#1243650 * bsc#1245509
* bsc#1233072 * bsc#1240744 * bsc#1243650 * bsc#1247315
pandoc-cli: enable pandoc server (semantically safe) with pandoc-server-0.1.0.5 pandoc: apply upstream patch to avoid error with ConTeXt (#2365309) https://git…
pandoc-cli: enable pandoc server (semantically safe) with pandoc-server-0.1.0.5 pandoc: apply upstream patch to avoid error with ConTeXt (#2365309) https://git…
* bsc#1233072 * bsc#1237048 * bsc#1240744 * bsc#1243650 * bsc#1245509
* bsc#1240744 * bsc#1243650 * bsc#1247315 Cross-References:
This update fixes these CVEs: CVE-2025-32364 CVE-2025-32365 CVE-2024-56378
The threat actor linked to the exploitation of the recently disclosed security flaws in Microsoft SharePoint Server is using a bespoke command-and-control (C2)…
Microsoft has revealed that one of the threat actors behind the active exploitation of SharePoint flaws is deploying Warlock ransomware on targeted systems.The…
Cybersecurity researchers have flagged a supply chain attack targeting a Microsoft Visual Studio Code (VS Code) extension called Ethcode that has been installe…
A new study of integrated development environments (IDEs) like Microsoft Visual Studio Code, Visual Studio, IntelliJ IDEA, and Cursor has revealed weaknesses i…
