The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A Russian state-sponsored cyber espionage group known as Static Tundra has been observed actively exploiting a seven-year-old security flaw in Cisco IOS and Ci…
Cybersecurity researchers have demonstrated a new prompt injection technique called PromptFix that tricks a generative artificial intelligence (GenAI) model in…
Researchers discovered a major security flaw in Google Calendar that could allow hijacking Gemini agents…A Google Calendar Flaw Could Allow Hijacking Gemini Vi…
Microsoft has released the scheduled Patch Tuesday updates for August 2025. This month’s update bundle…Microsoft Fixed Over 100 Flaws With August 2025 Patch Tu…
A new Linux kernel vulnerability has surfaced, and if you're managing Linux systems, this flaw necessitates your immediate attention. CVE-2024-53141 is a criti…
Threat actors are exploiting a nearly two-year-old security flaw in Apache ActiveMQ to gain persistent access to cloud Linux systems and deploy malware called …
After two decades of developing increasingly mature security architectures, organizations are running up against a hard truth: tools and technologies alone are…
Cybersecurity researchers have lifted the lid on the threat actors' exploitation of a now-patched security flaw in Microsoft Windows to deploy the PipeMagic ma…
Managing CPU security mitigations has always been one of those balancing acts that systems administrators live and breathe but rarely get applause for. After a…
Managing CPU security mitigations has always been one of those balancing acts that systems administrators live and breathe but rarely get applause for. After a…
Cybersecurity researchers have discovered a malicious package in the Python Package Index (PyPI) repository that introduces malicious behavior through a depend…
The threat actor known as EncryptHub is continuing to exploit a now-patched security flaw impacting Microsoft Windows to deliver malicious payloads.Trustwave S…
Multiple HTTP/2 implementations have been found susceptible to a new attack technique called MadeYouReset that could be explored to conduct powerful denial-of-…
Ever wonder how a seemingly minor bug in memory management can crack open a door for attackers to slip through? Meet the use-after-free (UAF) vulnerability''an…
Cybersecurity researchers have disclosed a new Android trojan called PhantomCard that abuses near-field communication (NFC) to conduct relay attacks for facili…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added two security flaws impacting N-able N-central to its Known Exploited Vulner…
Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execu…
Fortinet is alerting customers of a critical security flaw in FortiSIEM for which it said there exists an exploit in the wild.The vulnerability, tracked as CVE…
The popular file archiving tool WinRAR had a serious zero-day vulnerability threatening systems with code…WinRAR Fixed A Zero-Day Flaw Exploited By RomCom on L…
Let's talk about CVE-2025-38236 . If you've been following the Linux kernel's security track record, you already know how hard developers work to keep it solid…
This week, cyber attackers are moving quickly, and businesses need to stay alert. They’re finding new weaknesses in popular software and coming up with clever …
Cybersecurity researchers have uncovered multiple security flaws in Dell's ControlVault3 firmware and its associated Windows APIs that could have been abused b…
CSRF, or Cross-Site Request Forgery , is one of those vulnerabilities that's deceptively simple but can wreak havoc if left unaddressed. Think about it: your u…
SQL injection (SQLi) is one of those vulnerabilities that's deceptively simple in concept yet devastating in its impact. It's a family of security flaws tied t…