The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A new Mirai botnet variant tracked as ''V3G4' targets 13 vulnerabilities in Linux-based servers and IoT devices to use in DDoS (distributed denial of service) …
A security researcher discovered a serious security vulnerability that risked Toyota’s suppliers’ and users’ data.…Researcher Discovers Backdoor In Toyota Supp…
Threat actors affiliated with a ransomware strain known as Play are leveraging a never-before-seen exploit chain that bypasses blocking rules for ProxyNotShell…
Microsoft has revised the severity of a security vulnerability it originallypatched in September 2022, upgrading it to "Critical" after it emerged that it coul…
Cybersecurity researchers have reported an increase inTrueBotinfections, primarily targeting Mexico, Brazil, Pakistan, and the U.S.Cisco Talos said the attacke…
The maintainers of the FreeBSD operating system have released updates to remediate a security vulnerability impacting the ping module that could be potentially…
Researchers have disclosed details of three new security vulnerabilities affecting operational technology (OT) products from CODESYS and Festo that could lead …
Future Intel CPUs and some existing processors via a microcode update will support a new feature called the Asynchronous EXit (AEX) notification mechanism to h…
The tech provider ConnectWise disclosed a severe remote code execution flaw that exposed thousands of…ConnectWise Addressed Remote Code Execution Flaw Risking …
Recently, a remote code execution flaw in the Apache Common Text library stirred up the…Apache Commons Text Library Flaw Is Worrisome, But Not Like Log4Shell o…
Just a couple of weeks after a previous zero-day, Google has rolled out another emergency…Google Fix Another Chrome Zero-Day With An Emergency Update on Latest…
Heads up, Chrome users! Google has rolled out another major Chrome browser update fixing a…Google Address Another Zero-Day Vulnerability In Chrome Browser on L…
A vulnerability in Motion allows a remote attacker to cause denial of service.
OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169) * OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540) * OpenJDK:…
OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169) * OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540) * OpenJDK:…
The 8220 cryptomining group has expanded in size to encompass as many as 30,000 infected hosts, up from 2,000 hosts globally in mid-2021."8220 Gang is one of t…
Researchers discovered a severe security vulnerability in the Android Photos app that exposed Amazon access…High-Severity Vulnerability Found In Amazon Photos …
Last month Microsoft issued the first production release of CBL-Mariner 2.0 , its in-house Linux distribution used for powering services from Microsoft Azure t…
- lockState: do not print `error:` when exit code is unaffected (#2090926) ---- - fix potential DoS from unprivileged users via the state file (CVE-2022-1348)
Several botnets are now using exploits targeting a critical remote code execution (RCE) vulnerability to infect Linux servers running unpatched Atlassian Confl…
This update upgrades Firefox to version 91.9.1 ESR. * Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution (CVE-2022-152…
This update upgrades Firefox to version 91.9.1 ESR. * Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution (CVE-2022-152…
This update upgrades Thunderbird to version 91.9.1. * Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution (CVE-2022-152…
Heads up Chrome users! Google has just pushed another update to its Chrome browser, once…Latest Google Chrome Update Fixed Another Zero-Day Flaw on Latest Hack…