The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
VulnerableRedis serviceshave been targeted by a "new, improved, dangerous" variant of a malware called SkidMap that's engineered to target a wide range of Linu…
VulnerableRedis serviceshave been targeted by a "new, improved, dangerous" variant of a malware called SkidMap that's engineered to target a wide range of Linu…
Researchers have identified a new side-channel attack impacting all existing processors. Named “Collide+Power”, this side-channel…Collide+Power Attack: New Sid…
In an era where concerns about online privacy are at an all-time high, many individuals are seeking ways to reclaim control over their personal data. As a resp…
Researchers have discovered a new phishing campaign targeting Facebook accounts while exploiting a Salesforce zero-day.…Salesforce Zero-Day Flaw Exploited In F…
Managed Detection and Response (MDR) has emerged as a crucial solution for organizations looking to bolster their security measures. MDR allows businesses to o…
Threat actors are using an open-source rootkit calledReptileto target Linux systems in South Korea."Unlike other rootkit malware that typically only provide co…
Cybersecurity researchers have discovered a new high-severity security flaw in PaperCut print management software for Windows that could result in remote code …
A married couple from New York City has pleaded guilty to money laundering charges in connection with the 2016 hack of cryptocurrency stock exchange Bitfinex, …
Several denial of service (DoS) and code execution vulnerabilities have been discovered in the Vim enhanced vi editor.
Two critical remote code execution (RCE) vulnerabilities have been found in OpenSSH (CVE-2023-28531 and CVE-2023-38408). Because these bugs are simple to explo…
Cybersecurity researchers have discovered a new bunch of malicious packages on the npm package registry that are designed to exfiltrate sensitive developer inf…
A four-year-old critical security flaw impacting Fortinet FortiOS SSL has emerged as one of the most routinely and frequently exploited vulnerabilities in 2022…
Threat actors are leveraging a technique called versioning to evade Google Play Store's malware detections and target Android users."Campaigns using versioning…
Increasing cyber threats and attacks have made protecting organizational data a paramount concern for businesses of all sizes. A group of experts have recogniz…
Cybersecurity researchers have discovered a new version of malware calledRilidethat targets Chromium-based web browsers to steal sensitive data and steal crypt…
Hundreds of Citrix NetScaler ADC and Gateway servers have been breached by malicious actors to deploy web shells, according to the Shadowserver Foundation.The …
The frequency and complexity of cyber threats are constantly evolving. At the same time, organizations are now collecting sensitive data that, if compromised, …
It was discovered that under specific microarchitectural circumstances, a register in "Zen 2" CPUs might not be written to 0 correctly, potentially causing dat…
Threat actors have been observed using Amazon Web Services ( AWS ) 's System Manager (SSM) agent as a Remote Access Trojan (RAT) on Linux and Windows machines.
Several significant out-of-bounds access vulnerabilities have been found in the X.Org X Server (CVE-2021-4008, CVE-2021-4009, and CVE-2021-4011). These flaws t…
Microsoft is warning of the threat malicious cyber actors pose tostadium operations, noting that the cyber risk surface of live sporting events is "rapidly exp…
Cybersecurity researchers have discovered a bypass for a recently fixed actively exploited vulnerability in some versions of Ivanti Endpoint Manager Mobile (EP…
Web app testing is crucial to web apps' security, effectiveness, usability, and user satisfaction. With increasing app complexity and rising user expectations …