The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
U.S. and Israeli cybersecurity agencies have published a new advisory attributing an Iranian cyber group to targeting the 2024 Summer Olympics and compromising…
A high-severity security flaw has been disclosed in the LiteSpeed Cache plugin for WordPress that could allow an unauthenticated threat actor to elevate their …
Cybersecurity researchers have uncovered an ongoing malvertising campaign that abuses Meta's advertising platform and hijacked Facebook accounts to distribute …
Cybersecurity researchers have discovered a new malicious Python package that masquerades as a cryptocurrency trading tool but harbors functionality designed t…
A little over three dozen security vulnerabilities have been disclosed in various open-source artificial intelligence (AI) and machine learning (ML) models, so…
More than six years after the Spectre security flaw impacting modern CPU processors came to light, new research has found that the latest AMD and Intel process…
A government entity and a religious organization in Taiwan were the target of a China-linked threat actor known as Evasive Panda that infected them with a prev…
A critical vulnerability just received a fix with the latest Kubernetes Image Builder release. The…Hard-Coded Credentials Vulnerability Found In Kubernetes Ima…
Three malicious packages published to the npm registry in September 2024 have been found to contain a known malware called BeaverTail, a JavaScript downloader …
A new attack technique could be used to bypass Microsoft's Driver Signature Enforcement (DSE) on fully patched Windows systems, leading to operating system (OS…
Fortinet has confirmed details of a critical security flaw impacting FortiManager that has come under active exploitation in the wild.Tracked as CVE-2024-47575…
The world is becoming 'smarter' and increasingly digital daily, which can only mean one thing. To ensure that all systems and applications are secure, a sound …
Heads up, WordPress admins! It’s time to update your websites with the latest Jetpack release…Critical Vulnerability Patched In Jetpack WordPress Plugin on Lat…
Cybersecurity researchers have discovered a number of suspicious packages published to the npm registry that are designed to harvest Ethereum private keys and …
The notorious banking trojan, known as the Astaroth malware, has resurfaced in recent campaigns, particularly…Astaroth Banking Malware Runs Actively Targets Us…
VMware has released software updates to address an already patched security flaw in vCenter Server that could pave the way for remote code execution.The vulner…
Linus Torvalds, the creator of Linux, recently expressed his frustration about using barrier_nospec() within the copy_from_user() functionality. His main conce…
Microsoft recently unveiled OpenHCL , an open-source paravisor that augments virtualization stacks to facilitate confidential computing VMs on Intel TDX and AM…
Microsoft addressed crossed the century of vulnerability fixes, making it one of the huge update…Microsoft Fixed 100+ Vulnerabilities With October Patch Tuesda…
Recent advancements by cybersecurity researchers have shed additional light on Cicada3301, an emerging and formidable ransomware-as-a-service (RaaS) threat. Th…
Cybersecurity and intelligence agencies from Australia, Canada, and the U.S. have warned about a year-long campaign undertaken by Iranian cyber actors to infil…
Microsoft has disclosed details about a now-patched security flaw in Apple's Transparency, Consent, and Control (TCC) framework in macOS that has likely come u…
Cybersecurity researchers have gleaned additional insights into a nascent ransomware-as-a-service (RaaS) called Cicada3301 after successfully gaining access to…
An attacker-friendly vulnerability in Linux systems has been discovered, allowing malicious actors to circumvent the noexec mount flag and execute malicious co…