The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The threat actor group RomCom have exploited two zero days in its recent backdoor campaigns.…RomCom Exploits Zero Days In Recent Backdoor Campaigns on Latest H…
Microsoft has addressed four security flaws impacting its artificial intelligence (AI), cloud, enterprise resource planning, and Partner Center offerings, incl…
Linux 6.13 features significant enhancements in Intel Trust Domain Extensions (TDX) code that aim to provide robust hardware-based security protections for vir…
The North Korea-linked threat actor known as Sapphire Sleet is estimated to have stolen more than $10 million worth of cryptocurrency as part of social enginee…
Google has long been at the forefront of innovation in cybersecurity, yet security vulnerabilities in its widely used products like Chrome browser and Gmail ar…
As many as 2,000 Palo Alto Networks devices are estimated to have been compromised as part of a campaign abusing the newly disclosed security flaws that have c…
OpenShift has long been recognized as an outstanding platform for container orchestration and cloud-native app development, providing Linux administrators with…
In recent years, artificial intelligence (AI) has begun revolutionizing Identity Access Management (IAM), reshaping how cybersecurity is approached in this cru…
Let’s face it—traditional security training can feel as thrilling as reading the fine print on a software update. It’s routine, predictable, and, let’s be hone…
Containerization is now standard in today's fast-paced technological landscape. It offers streamlined development, enhanced scalability, and improved resource …
Operational Technology (OT) security has affected marine vessel and port operators, since both ships and industrial cranes are being digitalized and automated …
Apple has publicly made available its Private Cloud Compute (PCC) Virtual Research Environment (VRE), allowing the research community to inspect and verify the…
Cybersecurity and intelligence agencies from Australia, Canada, and the U.S. have warned about a year-long campaign undertaken by Iranian cyber actors to infil…
A critical security flaw has been disclosed in the Kubernetes Image Builder that, if successfully exploited, could be abused to gain root access under certain …
A new spear-phishing campaign targeting Brazil has been found delivering a banking malware called Astaroth (aka Guildma) by making use of obfuscated JavaScript…
As digital privacy and security concerns increase, operating systems that safeguard user anonymity and data privacy have gained greater prominence. One such op…
Microsoft and the U.S. Department of Justice (DoJ) on Thursday announced the seizure of 107 internet domains used by state-sponsored threat actors with ties to…
The popular privacy tools Tor and Tails OS formally announced a merger to enhance their…Tor And Tails OS Announce Merger For Streamlined Operations on Latest H…
Multiple vulnerabilities have been fixed in ruby-rails-html-sanitizer, a Ruby library for sanitizing HTML fragments in Rails applications. CVE-2022-23517
Russian-speaking users have been targeted as part of a new campaign distributing a commodity trojan called DCRat (aka DarkCrystal RAT) by means of a technique …
A previously undocumented malware called SambaSpy is exclusively targeting users in Italy via a phishing campaign orchestrated by a suspected Brazilian Portugu…
Cybersecurity researchers have uncovered a new malware campaign targeting Linux environments to conduct illicit cryptocurrency mining and deliver botnet malwar…
Researchers highlighted a serious security threat posed to airports and flight cockpits due to a…Researchers Discover SQL Injection Issue That Can Bypass Airpo…
A hacktivist group known as Head Mare has been linked to cyber attacks that exclusively target organizations located in Russia and Belarus."Head Mare uses more…