Stay Informed

Cybersecurity News

Home / News

Quick searches: Linux Windows Microsoft 365 AWS OVH VMware WordPress Fortinet Citrix VPN

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses
Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

FluHorse Malware Targets Android Users By Mimicking Legit Apps

Researchers have warned Android users of a new malware that steals two-factor authentication (2FA) codes…FluHorse Malware Targets Android Users By Mimicking Le…

Android

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles

OpenSSF: Making SBOMs More Dynamic to Reduce Software Security Risks

Since 41% of organizations are still not confident about their open-source software security, more innovations are needed to change this narrative. Even though…

Linux

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles Vulnerabilities

How To Secure Against WordPress Vulnerabilities with Predictive Analysis Detection & Automated Remediation

WordPress is one of the most popular content management systems in the world due to the ability it gives non-technical, inexperienced users to create professio…

WordPress

The Hacker News
The Hacker News Vulnerabilities

XWorm Malware Exploits Follina Vulnerability in New Wave of Attacks

Cybersecurity researchers have discovered an ongoing phishing campaign that makes use of a unique attack chain to deliver theXWorm malwareon targeted systems.S…

The Hacker News
The Hacker News Vulnerabilities

Netgear Routers' Flaws Expose Users to Malware, Remote Attacks, and Surveillance

As many as five security flaws have been disclosed in Netgear RAX30 routers that could be chained to bypass authentication and achieve remote code execution."S…

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles

India Bans Open Source Messaging Apps for Security Reasons. FOSS Community Says Good Luck

India's government has reportedly banned 14 messaging apps on national security grounds, including some open source services.

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles

Firefox 114 Beta Revamps DNS over HTTPS Feature, Adds Cookie Banner Reduction

Mozilla never stops and work already started on the next major release of their popular open-source and cross-platform web browser, Firefox 114, which entered …

The Hacker News
The Hacker News Breaches & leaks

Bl00dy Ransomware Gang Strikes Education Sector with Critical PaperCut Vulnerability

U.S. cybersecurity and intelligence agencies have warned of attacks carried out by a threat actor known as theBl00dy Ransomware Gangthat attempt to exploit vul…

The Hacker News
The Hacker News Vulnerabilities

Severe Security Flaw Exposes Over a Million WordPress Sites to Hijack

A security vulnerability has been disclosed in the popular WordPress pluginEssential Addons for Elementorthat could be potentially exploited to achieve elevate…

WordPress

The Hacker News
The Hacker News Vulnerabilities

New Flaw in WordPress Plugin Used by Over a Million Sites Under Active Exploitation

A security vulnerability has been disclosed in the popular WordPress pluginEssential Addons for Elementorthat could be potentially exploited to achieve elevate…

WordPress

The Hacker News
The Hacker News Vulnerabilities

How Attack Surface Management Supports Continuous Threat Exposure Management

According to Forrester, External Attack Surface Management (EASM) emerged as a market category in 2021 and gained popularity in 2022. In a different report, Ga…

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles Vulnerabilities

WebKitGTK Arbitrary Code Execution, Info Disclosure Bugs Fixed - Update Now

Several high-severity vulnerabilities have been found in the WebKitGTK web engine, including a use after free issue that may have been actively exploited (CVE-…

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles Vulnerabilities

PHP Vuln Threatens Confidentiality of Impacted Systems

It was recently discovered that PHP could be made to bypass password checking if a specially crafted input was provided (CVE-2023-0567).

PHP

The Hacker News
The Hacker News Breaches & leaks

Babuk Source Code Sparks 9 Different Ransomware Strains Targeting VMware ESXi Systems

Multiple threat actors have capitalized on the leak of Babuk (aka Babak or Babyk) ransomware code in September 2021 to build as many as nine different ransomwa…

VMware

The Hacker News
The Hacker News Breaches & leaks

Andoryu Botnet Exploits Critical Ruckus Wireless Flaw for Widespread Attack

A nascent botnet calledAndoryuhas been found toexploita now-patched critical security flaw in the Ruckus Wireless Admin panel to break into vulnerable devices.…

The Hacker News
The Hacker News

Google Announces New Privacy, Safety, and Security Features Across Its Services

Google unveiled a slew of new privacy, safety, and security features today at its annual developer conference, Google I/O. The tech giant's latest initiatives …

The Hacker News
The Hacker News Vulnerabilities

Experts Detail New Zero-Click Windows Vulnerability for NTLM Credential Theft

Cybersecurity researchers have shared details about a now-patched security flaw in Windows MSHTML platform that could be abused to bypass integrity protections…

Windows

The Hacker News
The Hacker News

Sophisticated DownEx Malware Campaign Targeting Central Asian Governments

Government organizations in Central Asia are the target of a sophisticated espionage campaign that leverages a previously undocumented strain of malware dubbed…

The Hacker News
The Hacker News

Mastermind Behind Twitter 2020 Hack Pleads Guilty and Faces up to 70 Years in Prison

A U.K. national has pleaded guilty in the U.S. in connection with the July 2020 Twitter attack affecting numerous high-profile accounts and defrauding other us…

The Hacker News
The Hacker News Breaches & leaks

U.S. Government Neutralizes Russia's Most Sophisticated Snake Cyber Espionage Tool

The U.S. government on Tuesday announced the court-authorized disruption of a global network compromised by an advanced malware strain known asSnakewielded by …

The Hacker News
The Hacker News

From DevOps to DevSecOps: Strengthen Product Security with Collaborative Tools

In the fast-paced cybersecurity landscape, product security takes center stage. DevSecOps swoops in, seamlessly merging security practices into DevOps, empower…

The Hacker News
The Hacker News

Product Security: Harnessing the Collective Experience and Collaborative Tools in DevSecOps

In the fast-paced cybersecurity landscape, product security takes center stage. DevSecOps swoops in, seamlessly merging security practices into DevOps, empower…

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles

Best Practices for PHP Security

Now more than ever, people, developers, and businesses alike consider PHP a dying language and that it might have no place in the IT/Dev World. However, PHP is…

PHP

The Hacker News
The Hacker News Vulnerabilities

Microsoft Warns of State-Sponsored Attacks Exploiting Critical PaperCut Vulnerability

Iranian nation-state groups have now joined financially motivated actors in actively exploiting a critical flaw in PaperCut print management software, Microsof…