Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A number of security vulnerabilities have been disclosed in 42 Gears' SureMDM device management solution that could be weaponized by attackers to perform a sup…
Threat actors leveraged a cloud video hosting service to carry out a supply chain attack on more than100 real estate websitesoperated by Sotheby's Realty that …
To address the growing threat of software supply chain attacks , the Linux Foundation announced at the at the Linux Foundation Membership Summit that it is upg…
U.S. technology firm Kaseya, which is firefighting the largest everÂsupply-chain ransomware strikeÂon its VSA on-premises product, ruled out the possibility th…
Threat actors behind the notorious REvil cybercrime operation appear to have pushed ransomware via an update for Kaseya's IT management software, hitting aroun…
While ransomware attacks already leave the targeted organizations helpless for days, some attacks can have…REvil Ransomware Targets MSPs Via Kaseya Supply-Chai…
Cybersecurity researchers have disclosed a critical unpatched vulnerability affecting Pling-based free and open-source software (FOSS) marketplaces for Linux p…
A new cyber espionage group named Gelsemium has been linked to aÂsupply chain attack targeting the NoxPlayerÂAndroid emulator that was disclosed earlier this y…
A serious cyber attack has recently been brought to the attention of numerous Japanese government…Hackers Exploited Fujitsu SaaS Targeting Japanese Govt Agenci…
Cybersecurity company Rapid7 on Thursday revealed that unidentified actors improperly managed to get hold of a small portion of its source code repositories in…
A serious security vulnerability existed in the PHP Composer package. Exploiting this bug could allow…Vulnerability In PHP Composer Package Could Allow Supply-…
Another software giant has disclosed a security breach that potentially bears a long-term devastating impact.…Codecov Breach Following Supply-Chain Attack Affe…
Mozilla announced this week that all developers of Firefox add-ons must enableÂa two-factor authentication (2FA) solutionÂfor their account to prevent supply-c…
Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply …
CrowdStrike, in partnership with Google and the Shadowserver Foundation, has announced the simultaneous disruption of all command-and-control (C2) channels ass…
A critical security flaw has been disclosed in LangChain Core that could be exploited by an attacker to steal sensitive secrets and even influence large langua…
Blockchain is best known for its use in cryptocurrencies like Bitcoin, but it also holds significant applications for online authentication. As businesses in v…
Threat actors have been observed publishing a new wave of malicious packages to the NuGet package manager as part of an ongoing campaign that began in August 2…
American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer dat…
ConnectWise initially said on Friday that it was investigating “attempts of unauthorized access associated with the ConnectWise Cloud Backup environment,” and …
ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and comprom…
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend devi…
An npm package used throughout the SubQuery project was poisoned.
Turning off email images should at least stop the pictures. This week, attackers had a workaround: a scannable QR code built out of text. It still appears, eve…
