Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Thethree zero-day flawsaddressed by Apple on September 21, 2023, were leveraged as part of an iPhone exploit chain in an attempt to deliver a spyware strain ca…
After serving users with one of the most resilient end-to-end encryption protocols for communication, Signal…Signal Upgrades Its E2E Encryption With Quantum Re…
The peer-to-peer (P2) worm known asP2PInfecthas witnessed a surge in activity since late August 2023, witnessing a 600x jump between September 12 and 19, 2023.…
Security teams are familiar with threats emanating from third-party applications that employees add to improve their productivity. These apps are inherently de…
China's Ministry of State Security (MSS) has accused the U.S. of breaking into Huawei's servers, stealing critical data, and implanting backdoors since 2009, a…
A financially motivated threat actor has been outed as an initial access broker (IAB) that sells access to compromised organizations for other adversaries to c…
The maintainers of Free Download Manager (FDM) have acknowledged a security incident dating back to 2020 that led to its website being used to distribute malic…
A malicious actor released a fake proof-of-concept (PoC) exploit for a recently disclosed WinRAR vulnerability on GitHub with an aim to infect users who downlo…
A malicious actor released a fake proof-of-concept (PoC) exploit for a recently disclosed WinRAR vulnerability on GitHub with an aim to infect users who downlo…
Multiple security flaws have been disclosed in the Nagios XI network monitoring software that could result in privilege escalation and information disclosure.T…
Cybersecurity researchers have discovered a fresh batch of malicious packages in the npm package registry that are designed to exfiltrate Kubernetes configurat…
GitLab has shipped security patches to resolve a critical flaw that allows an attacker to run pipelines as another user.The issue, tracked asCVE-2023-5009(CVSS…
Cybersecurity company Trend Micro hasreleasedpatches and hotfixes to address a critical security flaw in Apex One and Worry-Free Business Security solutions fo…
Researchers have caught a new malware campaign in the wild that deploys a novel Rust-based…Hackers Target Azerbaijan Users With A Novel Rust Malware on Latest …
Recently, a cryptocurrency firm, Fortress Trust, disclosed a theft of $15 million following a cyber…Google Authenticator Flaw Inadvertently Facilitated $15 Mil…
Targets located in Azerbaijan have been singled out as part of a new campaign that's designed to deploy Rust-based malware on compromised systems.Cybersecurity…
XWorm is a relatively new representative of the remote access trojan cohort that has already earned its spot among the most persistent threats across the globe…
Researchers have discovered a never-before-seen backdoor for Linux that's being used by a threat actor linked to the Chinese government.
A lot of people might be tempted to dismiss cyber security as something relatively unimportant.…Why is cyber security important for your company? on Latest Hac…
New research has found that close to 12,000 internet-exposed Juniper firewall devices are vulnerable to a recently disclosed remote code execution flaw.VulnChe…
The suspected Pakistan-linked threat actor known asTransparent Tribeis using malicious Android apps mimicking YouTube to distribute the CapraRAT mobile remote …
Researchers have found a new variant of the MidgeDropper malware typically targeting Windows systems. In…New MidgeDropper Malware Variant Found Targeting Windo…
A researcher found an interesting vulnerability in Windows 11 Themes that could allow arbitrary code…ThemeBleed – Code Execution Vulnerability In Windows 11 Th…
Software development company Retool has disclosed that the accounts of 27 of its cloud customers were compromised following a targeted and SMS-based social eng…
