Cyber Security, Without the Jargon

Plex has fixed several security issues without publishing their details yet. Here is how to update the server you actually run, check that it worked, and avoid turning uncertainty into panic.

A suspected breach put millions of license scans up for sale. Here is what that changes, what remains unconfirmed, and the few steps worth taking now.

Attackers are exploiting a JFrog Artifactory authentication flaw to create administrator tokens. Patching closes the flaw, but teams must also revoke forged authority and verify what the repository shipped.

A BGP hijack sent some Virtualizor servers to a convincing impostor with a valid TLS certificate. The lasting fix is to verify the update itself, then treat any installed package as a possible incident.

GitSpawn flaws turned routine Git checks into commands chosen by a received repository. Here is why ordinary cloning changes the risk, what to check now, and where the durable boundary belongs.