Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
As observed, WhatsApp for Windows does not block Python or PHP script execution on Windows…WhatsApp Allows Python, PHP Script Execution on Windows Without Warn…
The social media giant X (formerly Twitter), quietly started using users’ posts for training Grok…X Leverages Users’ Posts For Training Its Grok AI on Latest H…
The threat actors behind an ongoing malware campaign targeting software developers have demonstrated new malware and tactics, expanding their focus to include …
Canonical has fixed several recently identified critical Linux kernel vulnerabilities in July 2024. These vulnerabilities primarily affect Microsoft Azure clou…
On July 24, 2024, OpenSSL took an extraordinary step toward improving community engagement and realigning with its core values when it announced the implementa…
Japanese organizations are the target of a Chinese nation-state threat actor that leverages malware families like LODEINFO and NOOPDOOR to harvest sensitive in…
We’ll TL;DR the FUDdy introduction: we all know that phishing attacks are on the rise in scale and complexity, that AI is enabling more sophisticated attacks t…
A new malicious campaign has been observed making use of malicious Android apps to steal users' SMS messages since at least February 2022 as part of a large-sc…
Companies in Russia and Moldova have been the target of a phishing campaign orchestrated by a little-known cyber espionage group known as XDSpy.The findings co…
As Linux admins, protecting our sensitive data and securing our systems against the growing threat of Linux malware is a crucial concern. After all, none of us…
Cybersecurity researchers have detailed widespread phishing campaigns targeting small and medium-sized businesses (SMBs) in Poland during May 2024 that led to …
Learn about critical threats that can impact your organization and the bad actors behind them from Cybersixgill’s threat experts. Each story shines a light on …
The nation-state threat actor known as SideWinder has been attributed to a new cyber espionage campaign targeting ports and maritime facilities in the Indian O…
Cybersecurity researchers are warning about a new phishing campaign that targets Microsoft OneDrive users with the aim of executing a malicious PowerShell scri…
A recently patched security flaw impacting VMware ESXi hypervisors has been actively exploited by "several" ransomware groups to gain elevated permissions and …
Researchers highlighted a serious privacy and security flaw that keeps deleted and private repositories retained…GitHub Design Flaw Retains Deleted, Private Re…
Google Chrome users recently faced hours-long trouble when the browser’s password manager feature developed a…Google Chrome Password Manager Flaw Triggered Out…
A serious security vulnerability in Docker Engine recently received a patch, compelling users to rush…Docker Engine Vulnerability Could Allow AuthZ Bypass on L…
Response from ServiceNow: Based on our investigation to date, we have not observed evidence that…ServiceNow Remote Code Execution Vulnerabilities Under Attack …
Progress Telerik Report Server users must rush to update their systems as the firm patched…Progress Telerik Report Server Vulnerability Allows RCE Attacks on L…
Cybersecurity company Acronis is warning that a now-patched critical security flaw impacting its Cyber Infrastructure (ACI) product has been exploited in the w…
OPNsense 24.7 'Thriving Tiger" marks an impressive milestone in open-source firewall and routing platforms. Built upon FreeBSD 14.1 , this latest iteration pro…
Searchable Encryption has long been a mystery. An oxymoron. An unattainable dream of cybersecurity professionals everywhere.Organizations know they must encryp…
A threat actor known as Stargazer Goblin has set up a network of inauthentic GitHub accounts to fuel a Distribution-as-a-Service (DaaS) that propagates a varie…
