3 articles in this category
Timely security news for IT and cloud teams: actively exploited vulnerabilities, Patch Tuesday, breaches and what to check or patch today, fact-checked against vendor advisories.
A musl crypt() quirk lets an oversized password unlock accounts that should never accept one on Alpine and other musl-based systems running sshd without PAM. It is in CISA KEV and being exploited. Here is how to check your servers and fix them.
Microsoft's November 2026 Patch Tuesday fixes 1,094 CVEs, including CVE-2026-124194, an Outlook spoofing flaw exploited in the wild to steal NTLMv2 hashes. CISA wants it patched by November 24. Here is who is affected and what to do today.
Railway's final incident report says an attacker escaped build isolation, abused a misconfigured OIDC trust and decrypted environment variables for up to about 100,000 workspaces, hunting AI provider keys. Here is what happened and the checklist for anyone who stored secrets there.