The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Cybersecurity researchers have shed light on a new ransomware strain called CACTUS that has been found to leverage known flaws in VPN appliances to obtain init…
Are you concerned about ransomware attacks? You're not alone. In recent years, these attacks have become increasingly common and can cause significant damage t…
Perhaps you're thinking of launching an e-commerce store, or you already have one and are looking for a flexible and secure way to run it. If so, using Linux i…
An ongoing phishing campaign with invoice-themed lures is being used to distribute the SmokeLoader malware in the form of a polyglot file, according to the Com…
Going back years there has been patches for allowing the Linux x86_64 kernel to build as Position Independent Executable (PIE) code to further enhance the syst…
With eBPF monitoring container activity from the kernel layer, many of the challenges associated with observability in the cloud are solved.
A recent report entitled Cloud Native and Kubernetes Security Predictions 2023 underscores the rapidly evolving landscape of Kubernetes and cloud security, emp…
Users of Advanced Custom Fields plugin for WordPress are being urged to update version 6.1.6 following the discovery of a security flaw.The issue, assigned the…
Various sectors in East Asian markets have been subjected to a new email phishing campaign that distributes a previously undocumented strain of Android malware…
Are you searching for Linux vulnerability scanners that can recognize, characterize, and categorize to scan Linux servers? If so, this article will provide det…
The Cybersecurity Certificate is a new addition to the Google Career Certificate program designed to help job seekers upskill and transition to tech. "Learners…
The North Korean state-sponsored threat actor known asKimsukyhas been discovered using a new reconnaissance tool calledReconSharkas part of an ongoing global c…
A new Android subscription malware namedFleckpehas been unearthed on the Google Play Store, amassing more than 620,000 downloads in total since 2022.Kaspersky,…
Cisco has warned of a critical security flaw in SPA112 2-Port Phone Adapters that it said could be exploited by a remote attacker to execute arbitrary code on …
Three new security flaws have been disclosed in Microsoft Azure API Management service that could be abused by malicious actors to gain access to sensitive inf…
Cybersecurity researchers have found a way to exploit a recently disclosed critical flaw in PaperCut servers in a manner that bypasses all current detections.T…
IT and cybersecurity teams are so inundated with security notifications and alerts within their own systems, it’s difficult to monitor external malicious envir…
Git 2.40.1 has been released to address three new security vulnerabilities being disclosed, which have been classified as ''high-severity'' by the National Vul…
A use-after-free vulnerability (CVE-2023-1829) has been discovered in the Linux Kernel traffic control index filter (tcindex). It was discovered that the tcind…
Three different threat actors leveraged hundreds of elaborate fictitious personas on Facebook and Instagram to target individuals located in South Asia as part…
Meta said it took steps to take down more than 1,000 malicious URLs from being shared across its services that were found to leverage OpenAI's ChatGPT as a lur…
A Chinese state-sponsored hacking outfit has resurfaced with a new campaign targeting government, healthcare, technology, and manufacturing entities based in T…
Threat actors are actively exploiting an unpatched five-year-old flaw impacting TBK digital video recording (DVR) devices, according to an advisory issued by F…
Penetration testing, or “pentesting,” is an essential process to ensure the security of iOS devices…iOS Penetration Testing Cheatsheet: Tools, Techniques & Ste…