The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The package python-fastapi before version 0.65.2-1 is vulnerable to cross-site request forgery.
The package kube-apiserver before version 1.21.1-1 is vulnerable to insufficient validation.
Codecov reported a devastating supply-chain attack in April. Yet, after almost a month, the victims…Rapid7 Admit Suffering An Impact Due To Codecov Breach on L…
An update for slapi-nis is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Importan…
Cybersecurity company Rapid7 on Thursday revealed that unidentified actors improperly managed to get hold of a small portion of its source code repositories in…
Farming isn't always safe from cyber threats ' at least, that's what some recently found…Security Vulnerabilities In John Deere API Could Expose Tractor Custom…
Researchers have found criminal hackers employing a new technique to steal data. This server-side data…Hackers Exploit Telegram API For Server-Side Data Exfilt…
ESET Internet Security is a popular security software specifically designed for internet usage. It's a comprehensive package developed by ESETFix Api-ms-win-cr…
A United States regulator has fined the credit card provider Capital One Financial Corp with $80 million over last year's data breach that exposed the personal…
The latest technology has turned the world upside down, and of course, for good reasons. Speaking of Application Programming Interfaces,Most Popular Cybersecur…
An update for openstack-keystone is now available for Red Hat OpenStack Platform 16 (Train). Red Hat Product Security has rated this update as having a securit…
An update for openstack-keystone is now available for Red Hat OpenStack Platform 15 (Stein). Red Hat Product Security has rated this update as having a securit…
For the past two years, Intel CPUs have been under siege by an unending series of attacks that make it possible for cybercriminals to pluck passwords, encrypti…
Researchers have found a malware operation in the wild targeting docker servers. Dubbed Kinsing, the malware is actively targeting DockerKinsing Malware Active…
Researchers have found a malware operation in the wild targeting docker servers. Dubbed Kinsing, the malware is actively targeting DockerKinsing Malware Active…
A day after researchers declared Linux having more vulnerabilities than Windows, Google now makes a free tool to be used by Linux systems to avoid potential US…
OpenStack Keystone could be made to expose sensitive information over the network.
An update for openstack-keystone is now available for Red Hat OpenStack Platform 15 (Stein). Red Hat Product Security has rated this update as having a securit…
Continuing the new normal of fixing things after major security breaches, Facebook has once again made it into the news.Facebook Makes Changes To Groups API Fo…
Internet-of things is seemly always vulnerable to security flaws. From individual users to the corporate sector, these IoT flaws haveResearcher Finds Vulnerabi…
It has been over a month since the cybersecurity firm Imperva suffered a breach, we now have an update. AsImperva Breach Update: Stolen AWS API Key Triggered T…
Are you always looking to expand your security practices? Do you want to take a crack at instituting a whole new way of creating a secure, password infrastruct…
Shmulik Cohen and Matan Giladi write: Apiiro research found 2,539 real secrets in 1,994 public GitHub repositories: database passwords, cloud keys, API tokens,…
WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher wh…