The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The U.S. Cybersecurity and Infrastructure Security Agency on FridayÂwarnedÂof crypto-mining and password-stealing malware embedded in "UAParser.js," a popular …
Microsoft on Monday revealed new malware deployed by the hacking group behind the SolarWinds supply chain attack last December to deliver additional payloads a…
In use for a decade as the de facto standard for communicating software bills of materials, The Linux Foundation has announced that the Software Package Data E…
As many as eight Python packages that were downloaded more than 30,000 times have been removed from the PyPI portal for containing malicious code, once again h…
Nearly three weeks after Florida-based software vendor Kaseya was hit by aÂwidespread supply-chain ransomware attack, the company on Thursday said it obtained …
Advanced Persistent Threats groups were once considered a problem that concerns Fortune 100 companies only. However, the threat landscape of the recent years t…
SolarWinds, the Texas-based company that became the epicenter of aÂmassive supply chain attackÂlate last year, has issued patches to contain a remote code exec…
Florida-based software vendor Kaseya on SundayÂrolled out urgent updates to address critical security vulnerabilities in its Virtual System Administrator (VSA)…
The recent tsunami of ransomware has brought to life the fears of downtime and data loss cybersecurity pros have warned about, as attacks on the energy sector,…
Codecov reported a devastating supply-chain attack in April. Yet, after almost a month, the victims…Rapid7 Admit Suffering An Impact Due To Codecov Breach on L…
In the wake of several major cybersecurity incidents - the most recent being the Colonial Pipeline ransomware attack, the government wants to shore up its soft…
APKPure, one of the largest alternative app stores outside of the Google Play Store, was infected with malware this week, allowing threat actors to distribute …
Gigaset Android phones have become a victim of a serious supply-chain attack. Reports reveal that…Hackers Deploy Malware To Gigaset Android Phones With Malicio…
For organizations that deal with the defense infrastructure ' cybersecurity is more than just a buzzword.Recently the US Department of Defense (DoD) created a …
The Solarwinds security blunders have raised awareness of the importance of protecting software supply chains from unauthorized changes. Now, the Linux Foundat…
The SolarWinds Sunburst attack has been in the headlines since it was first discovered in December 2020.ÂAs the so-called layers of the onion are peeled back, …
FireEye and Microsoft on Thursday said they discovered three more malware strains in connection with the SolarWinds supply-chain attack, including a "sophistic…
''A CII Best Practices badge, especially a gold badge, shows that an OSS project has implemented a large number of good practices to keep the project sustainab…
Updated jss packages fix security vulnerability: A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS CryptoManager, where it implicitly…
What an irony ' someone hacked the official website of the Monero cryptocurrency project and quietly replaced legitimate Linux and Windows binaries available f…
Attackers remotely changed the settings on refrigeration controls at supermarkets in Belgium, Sweden, Estonia and other European countries overnight into Monda…
The Guardian reports that supermarket freezers across Europe have been hit by a second suspected cyber-attack, with chains in Sweden, Belgium and Luxembourg re…
Blockchain security companies said more than $46 million left the Mercado Bitcoin platform.
A cyberattack on refrigeration systems has disrupted stores run by multiple supermarket chains across several European countries after hackers remotely changed…