System Security

Hardware vendors have a narrow window to integrate and deliver kernel patches after Google merges platform fixes into the Android Open Source Project. This complex synchronization is a critical component of the September update, which addresses a massive total of 180 vulnerabilities across the

Multi-tenant hosting environments face a significant structural risk as the CVE-2026-68488 flaw enables low-privileged customers to break isolation and access the underlying infrastructure. This critical vulnerability resides within the Backup Manager component of the Plesk Obsidian platform

Immediate system upgrades to version 8.4.0.2 are required to mitigate a high-severity vulnerability that allows for remote takeover without any interaction from legitimate system administrators. The discovery of this critical flaw in the Sangoma Switchvox communication platform has sent shockwaves

The ability to host a malicious library on a remote SMB share creates a high-risk scenario where attackers execute code without writing any files to local storage. This critical security breakdown, tracked as CVE-2026-6471 and colloquially known as PostGREShell, has fundamentally altered the threat

Rupert Marais has spent the better part of two decades at the intersection of hardware integrity and network resilience, establishing himself as a cornerstone of our security research team. His deep-seated expertise in endpoint protection and the nuanced management of complex network architectures

The long-term persistence of this flaw allowed for the potential deployment of backdoors that enable passwordless connections to production environments. This newly identified vulnerability, dubbed PostGREShell, remained dormant in the PostgreSQL ecosystem for over a decade before being addressed