The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
AlmaLinux , launched as an open-source, community-driven replacement for CentOS , has quickly established itself as an enterprise and developer-friendly Linux …
A newly devised technique leverages a Windows accessibility framework called UI Automation (UIA) to perform a wide range of malicious activities without tippin…
Regain control of SaaS sprawl with Day One discovery of all SaaS and GenAI accounts along with workflows to help you mitigate security risks, curb rogue app us…
Cybersecurity researchers have shed light on a sophisticated mobile phishing (aka mishing) campaign that's designed to distribute an updated version of the Ant…
A suspected China-nexus cyber espionage group has been attributed to an attacks targeting large business-to-business IT service providers in Southern Europe as…
Imagine a security system so exact it seems nearly surgical. Designed by the National Security Agency (NSA), Security-Enhanced Linux (SELinux) is precisely tha…
The Linux Foundation's recent Census III report provides critical insights for Linux administrators, information security professionals, and anyone interested …
Google recently unveiled a critical security update to their popular web browser, Google Chrome, addressing over a dozen significant security vulnerabilities. …
Ever wonder what happens in the digital world every time you blink? Here's something wild - hackers launch about 2,200 attacks every single day, which means so…
Cybersecurity researchers have discovered a software supply chain attack that has remained active for over a year on the npm package registry by starting off a…
Cybersecurity researchers have discovered a software supply chain attack that has remained active for over a year on the npm package registry by starting off a…
A popular open-source game engine called Godot Engine is being misused as part of a new GodLoader malware campaign, infecting over 17,000 systems since at leas…
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion. CVE-2024-34155 Calling De…
Multi-stage cyber attacks, characterized by their complex execution chains, are designed to avoid detection and trick victims into a false sense of security. K…
Compression utilities like 7-Zip have become essential tools for managing and storing data efficiently. Renowned for its high compression ratio and versatility…
Cybersecurity researchers have disclosed two new attack techniques against infrastructure-as-code (IaC) and policy-as-code (PaC) tools like HashiCorp's Terrafo…
Cybersecurity researchers have uncovered a new malicious campaign that leverages a technique called Bring Your Own Vulnerable Driver (BYOVD) to disarm security…
This is the .NET 9.0 GA release. It contains security fixes for CVE-2024-43498 and CVE-2024-43499 Announcement: https://devblogs.microsoft.com/dotnet/announcin…
Google recently unveiled a critical security update to their popular web browser, Google Chrome, addressing 12 significant security vulnerabilities. Chrome ver…
Upgrading and maintaining your operating system is crucial to optimal performance and security. AlmaLinux, a widely used open-source Linux distribution, recent…
Linux Kernel v6.12 marks a historic event in its 22-year history as it continues to meet the needs of developers, businesses, and end-users alike. Of particula…
Multiple decade-old security vulnerabilities have been disclosed in the needrestart package installed by default in Ubuntu Server (since version 21.04) that co…
AMD's Zen 5 architecture has earned wide praise for its robust performance capabilities since introducing the Ryzen 9000 series and EPYC 9005 "Turin" processor…
Cybersecurity researchers have shed light on a Linux variant of a relatively new ransomware strain called Helldown, suggesting that the threat actors are broad…