The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The patch management process can be painful, tedious, and time and labor intensive. Often, all this effort is for no other purpose than to maintain the operati…
Microsoft has disclosed details of a now-patched security flaw in Apple macOS that could be exploited by an attacker to get around security protections imposed…
AWS has patched a vulnerability in its Elastic Container Registry (ECR) that was uncovered by Lightspin researcher Gafnit Amiga during an examination of AWS's …
Samba has released software updates to remediate multiple vulnerabilities that, if successfully exploited, could allow an attacker to take control of affected …
Government entities in Ukraine have been breached as part of a new campaign that leveraged trojanized versions of Windows 10 installer files to conduct post-ex…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasaddedtwo vulnerabilities impacting Veeam Backup & Replication software to its Known Exploit…
Microsoft has revised the severity of a security vulnerability it originallypatched in September 2022, upgrading it to "Critical" after it emerged that it coul…
Web applications, often in the form of Software as a Service (SaaS), are now the cornerstone for businesses all over the world. SaaS solutions have revolutioni…
Tech giant Microsoft released its last set of monthly security updates for 2022 withfixes for 49 vulnerabilitiesacross its software products.Of the 49 bugs, si…
The U.S. National Security Agency (NSA) on Tuesdaysaida threat actor tracked as APT5 has been actively exploiting a zero-day flaw in Citrix Application Deliver…
Apple on Tuesday rolled out security updates to iOS, iPadOS, macOS, tvOS, and Safari web browser to address a new zero-day vulnerability that could result in t…
Google on Tuesday announced the open source availability ofOSV-Scanner, a scanner that aims to offer easy access to vulnerability information about various pro…
Google on Tuesday announced the open source availability ofOSV-Scanner, a scanner that aims to offer easy access to vulnerability information about various pro…
A critical security flaw has been disclosed in Amazon Elastic Container Registry (ECR) Public Gallery that could have been potentially exploited to stage a mul…
Fortinet on Monday issued emergency patches for a severe security flaw affecting its FortiOS SSL-VPN product that it said is being actively exploited in the wi…
Cybersecurity researchers have reported an increase inTrueBotinfections, primarily targeting Mexico, Brazil, Pakistan, and the U.S.Cisco Talos said the attacke…
Researchers discovered multiple vulnerabilities in MegaRAC BMC firmware that riddled the security of numerous server…Multiple Vulnerabilities In MegaRAC BMC Ri…
Researchers have discovered a critical remote code execution vulnerabilities in numerous remote keyboard apps for…Critical Vulnerabilities Found In Android Rem…
Rapid security testing is a need for all online entities – whether it’s about small…ImmuniWeb Community Edition Review – Inclusive Vulnerability Scanning for S…
An Internet Explorer zero-day vulnerability was actively exploited by a North Korean threat actor to target South Korean users by capitalizing on the recentIta…
A novel Go-based botnet calledZerobothas been observed in the wild proliferating by taking advantage of nearly two dozen security vulnerabilities in the intern…
A novel Go-based botnet calledZerobothas been observed in the wild proliferating by taking advantage of nearly two dozen security vulnerabilities in the intern…
A malicious campaign targeting the Middle East is likely linked toBackdoorDiplomacy, an advanced persistent threat (APT) group with ties to China.The espionage…
Three different security flaws have been disclosed in American Megatrends (AMI) MegaRACBaseboard Management Controller (BMC) software that could lead to remote…