Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Palo Alto Networks has released new indicators of compromise (IoCs) a day after the network security vendor confirmed that a zero-day vulnerability impacting i…
A threat actor known as BrazenBamboo has exploited an unresolved security flaw in Fortinet's FortiClient for Windows to extract VPN credentials as part of a mo…
This week marked the arrival of the monthly scheduled updates from Microsoft. With November 2024…Microsoft Released November 2024 Patch Tuesday With ~90 Fixes …
Threat actors have been found leveraging a new technique that abuses extended attributes for macOS files to smuggle a new malware called RustyAttr.The Singapor…
Romanian cybersecurity company Bitdefender has released a free decryptor to help victims recover data encrypted using the ShrinkLocker ransomware.The decryptor…
A security analysis of the OvrC cloud platform has uncovered 10 vulnerabilities that could be chained to allow potential attackers to execute code remotely on …
The Iranian threat actor known as TA455 has been observed taking a leaf out of a North Korean hacking group's playbook to orchestrate its own version of the Dr…
Microsoft recently took an essential step in strengthening its cloud-native offerings with Azure Linux 3.0 Preview for Azure Kubernetes Service version 1.31. T…
Google Cloud users will soon have to use multi-factor authentication, if they haven’t yet, as…Google Cloud To Implement MFA as a Mandatory Feature on Latest Ha…
Cybersecurity researchers have discovered a new phishing campaign that spreads a new fileless variant of known commercial malware called Remcos RAT.Remcos RAT …
The threat actors behind the AndroxGh0st malware are now exploiting a broader set of security flaws impacting various internet-facing applications, while also …
A threat actor with ties to the Democratic People's Republic of Korea (DPRK) has been observed targeting cryptocurrency-related businesses with a multi-stage m…
An ongoing phishing campaign is employing copyright infringement-related themes to trick victims into downloading a newer version of the Rhadamanthys informati…
Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) that has racked up thousands of downloads for over three years…
Cybersecurity researchers are warning that a command-and-control (C&C) framework called Winos is being distributed within gaming-related applications like inst…
Cybersecurity researchers are warning that a command-and-control (C&C) framework called Winos is being distributed within gaming-related applications like inst…
Google's cloud division has announced that it will enforce mandatory multi-factor authentication (MFA) for all users by the end of 2025 as part of its efforts …
Security threats continue to emerge from every corner of the cyber universe, with malicious actors constantly innovating new techniques to breach systems and r…
libtiff security update
Google has warned that a security flaw impacting its Android operating system has come under active exploitation in the wild.The vulnerability, tracked as CVE-…
Software development has always presented long-established programming languages with opportunities and challenges, including C++, which has long been a mainst…
Cybersecurity researchers have discovered a new version of a well-known Android malware family dubbed FakeCall that employs voice phishing (aka vishing) techni…
openexr security update
Code integrity and authenticity are crucial in today's continuous and rapid momentum in software development. This is where code signing becomes highly relevan…
