The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
After targeting mobile users for about a year, the CryptoRom scam is again active in…Researchers Find CryptoRom Scam Active Via Sideloaded Apps on Latest Hacki…
A new ransomware threat has emerged online that is already active in the wild. Identified…New Golang-based Epsilon Red Ransomware Caught Executing Active Attac…
Heads up, Android users. A new zero-day is under active exploitation in the wild targeting…Now-Patched Android Zero-Day Actively Exploited For Targeted Attacks…
The old banking trojan QBot has surfaced online once again as researchers discovered its new variant active in the wild.QBot Trojan Comes Back With New Nasty T…
Microsoft alerted all its users to stay vigilant with regard to PonyFinal ransomware attacks. Since the ransomware attacks are activeMicrosoft Warns Of PonyFin…
Oracle alerts users to update their systems at the earliest as they spot active exploitation of recently patched WebLogic bug.Oracle Alerts Users About Active …
Researchers have found a malware operation in the wild targeting docker servers. Dubbed Kinsing, the malware is actively targeting DockerKinsing Malware Active…
Researchers have found a malware operation in the wild targeting docker servers. Dubbed Kinsing, the malware is actively targeting DockerKinsing Malware Active…
School management firm Active Network has revealed a data breach. The incident primarily took place due to the attackers compromisingSchool Management Software…
The Magecart attackers seem very active these days. Carrying on with their malicious campaign, they have once again preyed onUK Activewear Retailer Sweaty Bett…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploite…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista…
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability,…
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active…
Apache’s release notice on Oct 3, 2026 lists six Apache Directory LDAP API vulnerabilities.
Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and r…
An important security update for Python 3.12 on Rocky Linux 10 addresses a vulnerability allowing directory bypass during tarfile extraction, with a CVSS score…
The Fedora 43 update for rust-git-interactive-rebase-tool links applications to an updated libgit2 library, addressing several security vulnerabilities from th…
The Fedora update for rust-git-interactive-rebase-tool includes a rebuild with the latest libgit2-sys crate, addressing multiple security vulnerabilities from …
CVE-2026-16232 lets an unauthenticated attacker seize full admin control of Check Point's management console. Check Point confirms in-the-wild attacks, and a R…
A significant security update is available for plexus-utils on Rocky Linux 9, addressing a directory traversal vulnerability (CVE-2025-67030) with a CVSS score…
Kate Deplaix reported that .install file directives were insufficiently restricted in OPAM, a package manager for OCaml. Installing files through .install file…
Kate Deplaix reported that .install file directives were insufficiently restricted in OPAM, a package manager for OCaml. Installing files through .install file…