The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday addedfive security flawsto its Known Exploited Vulnerabilities (KEV) catalog, citing…
A serious vulnerability existed in the popular WordPress plugin Elementor Pro that could allow website…Severe Elementor Pro WP Plugin Vulnerability Actively Ex…
Apple's decision to support MAC Address Randomization across its platforms may provide some degree of protection against a newly-identified Wi-Fi flaw research…
Microsoft has patched a misconfiguration issue impacting the Azure Active Directory (AAD) identity and access management service that exposed several "high-imp…
Critical security flaws in Cacti, Realtek, and IBM Aspera Faspex are being exploited by various threat actors in hacks targeting unpatched systems.This entails…
Unknown threat actors are actively exploiting a recently patched security vulnerability in the Elementor Pro website builder plugin for WordPress.The flaw, des…
The advanced persistent threat (APT) actor known as Winter Vivern is now targeting officials in Europe and the U.S. as part of an ongoing cyber espionage campa…
Researchers have discovered a major security vulnerability in the WiFi protocol that risks data exposure…Study Reveals WiFi Protocol Vulnerability Exposing Net…
Taiwanese hardware vendor QNAP warns customers to secure their Linux-powered network-attached storage (NAS) devices against a high-severity Sudo privilege esca…
For over a decade now the X.Org Server has been seeing routine security disclosures in its massive codebase with some security researchers saying it's even wor…
Enterprise communications software maker 3CX on Thursday confirmed that multiple versions of its desktop app for Windows and macOS are affected by asupply chai…
Details have emerged about a now-patched vulnerability in Azure Service Fabric Explorer (SFX) that could lead to unauthenticated remote code execution.Tracked …
A group of academics from Northeastern University and KU Leuven has disclosed a fundamental design flaw in the IEEE 802.11 Wi-Fi protocol standard, impacting a…
A number of zero-day vulnerabilities that were addressed last year were exploited by commercial spyware vendors to target Android and iOS devices, Google's Thr…
Several security vulnerabilities were recently addressed by Canonical in both Graphviz and the Linux kernel of Ubuntu.
A severe security vulnerability in OpenAI’s ChatGPT exposed users’ conversations, payment details, and other data.…ChatGPT Vulnerability Exposed Users’ Convos …
Apple on Monday backported fixes for an actively exploited security flaw to older iPhone and iPad models.The issue, tracked asCVE-2023-23529, concerns a type c…
A recent study reveals how attackers can trigger vulnerabilities in voice assistants for malicious purposes.…Study Reveals Inaudible Sound Attack Threatens Voi…
A serious authentication vulnerability existed in the WordPress plugin WooCommerce Payments, exploiting which could allow…Critical Vulnerability Fixed In WooCo…
Linux is a widespread OS known for its robust security . That being said, vulnerabilities are inevitable in any OS, and Linux system administrators must be vig…
Microsoft on Friday shared guidance to help customers discover indicators of compromise (IoCs) associated with a recently patched Outlook vulnerability.Tracked…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released eight Industrial Control Systems (ICS)advisorieson Tuesday, warning of critical f…
As many as 55 zero-day vulnerabilities were exploited in the wild in 2022, with most of the flaws discovered in software from Microsoft, Google, and Apple.Whil…
Vulnerability management is vital to a robust, proactive endpoint security strategy, enabling organizations to identify and address security weaknesses before …