The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Indian cryptocurrency exchange WazirX has confirmed that it was the target of a security breach that led to the theft of $230 million in cryptocurrency assets.…
The U.S. Cyber Safety Review Board (CSRB) has criticized Microsoft for a series of security lapses that led to the breach of nearly two dozen companies across …
Cloud solutions are more mainstream – and therefore more exposed – than ever before.In 2023 alone, a staggering 82% of data breaches were against public, priva…
Another security vulnerability has been found in the modern CPUs supporting speculative execution. Identified as…New GhostRace Vulnerability In CPUs May Leak D…
A group of researchers has discovered a new data leakage attack impacting modern CPU architectures supporting speculative execution.Dubbed GhostRace (CVE-2024-…
In today’s ever-evolving digital landscape, safeguarding your organization’s cyber infrastructure is crucial. With countless security…A Complete Guide to Breac…
Data security in a modern business environment is considered one of the most critical factors for any company. The digitalization of the world has led to more …
In 2023, the global average cost of a data breach reached$4.45 million. Beyond the immediate financial loss, there are long-term consequences like diminished c…
The threat actors linked toKinsinghave been observed attempting to exploit the recently disclosed Linux privilege escalation flaw called Looney Tunables as par…
In today's digital landscape, around60%of corporate data now resides in the cloud, with Amazon S3 standing as the backbone of data storage for many major corpo…
Passwords are at the core of securing access to an organization's data. However, they also come with security vulnerabilities that stem from their inconvenienc…
Nearly three dozen counterfeit packages have been discovered in the npm package repository that are designed to exfiltrate sensitive data from developer system…
With the growing reliance on web applications and digital platforms, the use of application programming interfaces (APIs) has become increasingly popular. If y…
[BLACK HAT] Googlers have lately found not one but two more security vulnerabilities in Intel and AMD processors that can be exploited to steal sensitive data …
A new Golang-based information stealer calledSkuldhas compromised Windows systems across Europe, Southeast Asia, and the U.S."This new malware strain tries to …
Email protection and network security services provider Barracuda is warning users about a zero-day flaw that it said has been exploited to breach the company'…
Lazarus, the prolific North Korean hacking group behind the cascadingsupply chain attack targeting 3CX, also breached two critical infrastructure organizations…
A new information-stealing malware has set its sights on Apple's macOS operating system to siphon sensitive information from compromised devices.DubbedMacSteal…
A malicious Python package on the Python Package Index (PyPI) repository has been found to use Unicode as a trick to evade detection and deploy an info-stealin…
Web hosting services provider GoDaddy on Friday disclosed a multi-year security breach that enabled unknown threat actors to install malware and siphon source …
The popular social media networking giant Reddit has appeared as the latest victim of a…Reddit Discloses Security Breach Affecting Internal Docs on Latest Hack…
Here are three of the worst breaches, attacker tactics and techniques of 2022, and the security controls that can provide effective, enterprise security protec…
Popular email marketing and newsletter service Mailchimp has disclosed yet another security breach that enabled threat actors to access an internal support and…
Ransomware attacks have become increasingly common and can have devastating consequences for businesses, and it…Strategies for Managing Security Posture and Pr…