The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A Chinese-speaking advanced persistent threat (APT) actor has been observed targeting web infrastructure entities in Taiwan using customized versions of open-s…
Cybersecurity researchers have discovered a new malvertising campaign that's designed to infect victims with a multi-stage malware framework called PS1Bot."PS1…
DEFCON isn't your average tech conference. It's not about launching flashy products or corporate handshakes''it's about putting reality under a microscope and …
Reportedly, Anthropic has restricted OpenAI from accessing the Claude API after noticing an apparent breach…Anthropic Restrict Claude API Access To OpenAI Engi…
Telecommunications organizations in Southeast Asia have been targeted by a state-sponsored threat actor known as CL-STA-0969 to facilitate remote control over …
The Russian nation-state threat actor known as Secret Blizzard has been observed orchestrating a new cyber espionage campaign targeting foreign embassies locat…
If you've spent any time managing Arch Linux systems, you're probably familiar with the Arch User Repository (AUR) . It's an undeniable powerhouse for software…
As AI creates a stir in the tech world, it has now grabbed the attention…New LAMEHUG AI Malware Devises Commands In Real-Time on Latest Hacking News | Cyber Se…
Cybersecurity researchers have disclosed what they say is a "critical design flaw" in delegated Managed Service Accounts (dMSAs) introduced in Windows Server 2…
The North Korean threat actors linked to the Contagious Interview campaign have been observed publishing another set of 67 malicious packages to the npm regist…
Various uses of the Go toolchain in untrusted VCS repositories can result in unexpected code execution. When using the Go toolchain in directories fetched usin…
If you're managing email infrastructure for a Linux-based environment, you've probably relied on Thunderbird at some point''or maybe you still do every day. It…
For those of us who lean on Tails to safeguard our digital privacy and anonymity, the 6.17 release doesn't come with flashy headlines or gimmicks''but that's e…
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new cyber attack campaign by the Russia-linked APT28 (aka UAC-0001) threat actors usi…
* bsc#1244471 Affected Products: * Containers Module 15-SP6 * Containers Module 15-SP7
Cybersecurity researchers from SafeDep and Veracode detailed a number of malware-laced npm packages that are designed to execute remote code and download addit…
For years, macOS has been more of a bystander in the containerization world''a useful client tool for developers but rarely the platform of choice for running …
AI has been weaving itself into every corner of tech, but when it lands squarely in the realm of ethical hacking and cybersecurity, that's when things get real…
Cybersecurity researchers have flagged a supply chain attack targeting over a dozen packages associated with GlueStack to deliver malware.The malware, introduc…
Cybersecurity researchers have disclosed details of a critical security flaw in the Roundcube webmail software that has gone unnoticed for a decade and could b…
Alright, let's talk about open-source AI models . If you're a Linux admin or developer, and you're already spinning up VMs, writing scripts, or monitoring logs…
Misconfigured Docker API instances have become the target of a new malware campaign that transforms them into a cryptocurrency mining botnet.The attacks, desig…
Cybersecurity researchers have discovered an indirect prompt injection flaw in GitLab's artificial intelligence (AI) assistant Duo that could have allowed atta…
Russian organizations have become the target of a phishing campaign that distributes malware called PureRAT, according to new findings from Kaspersky."The camp…