The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Companies in Russia and Moldova have been the target of a phishing campaign orchestrated by a little-known cyber espionage group known as XDSpy.The findings co…
freeradius security update
A recently patched security flaw impacting VMware ESXi hypervisors has been actively exploited by "several" ransomware groups to gain elevated permissions and …
Google Chrome users recently faced hours-long trouble when the browser’s password manager feature developed a…Google Chrome Password Manager Flaw Triggered Out…
Response from ServiceNow: Based on our investigation to date, we have not observed evidence that…ServiceNow Remote Code Execution Vulnerabilities Under Attack …
Progress Telerik Report Server users must rush to update their systems as the firm patched…Progress Telerik Report Server Vulnerability Allows RCE Attacks on L…
The security update announced as DSA 5734-1 caused a regression on configurations using the Samba DLZ module. Updated packages are now available to correct thi…
Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) repository that targets Apple macOS systems with the goal of s…
A Spanish-speaking cybercrime group named GXC Team has been observed bundling phishing kits with malicious Android applications, taking malware-as-a-service (M…
After much progress with Privacy Sandbox, Google has decided to roll back its most privacy-focused…Google Chrome Modifies Privacy Sandbox To Allow Cookies on L…
Cybersecurity researchers have disclosed a privilege escalation vulnerability impacting Google Cloud Platform's Cloud Functions service that an attacker could …
A zero-day security flaw in Telegram's mobile app for Android called EvilVideo made it possible for attackers to malicious files disguised as harmless-looking …
In an era where cybersecurity threats loom larger than ever, the discovery of a Remote Code Execution (RCE) vulnerability in OpenSSH by Qualys' Threat Research…
runc security update
libvirt security update
libuv security update
libreoffice security update
edk2 security update
Cybersecurity researchers have discovered a new Linux variant of a ransomware strain known as Play (aka Balloonfly and PlayCrypt) that's designed to target VMw…
Cybersecurity firm CrowdStrike, which is facing the heat for causing worldwide IT disruptions by pushing out a flawed update to Windows devices, is now warning…
The Linux Foundation and Open Source Security Foundation recently published a report entitled "Secure Software Development Education 2024 Survey''Understanding…
Cybersecurity researchers have shed light on an adware module that purports to block ads and malicious websites, while stealthily offloading a kernel driver co…
Cybersecurity researchers have discovered an updated variant of a known stealer malware that attackers affiliated with the Democratic People's Republic of Kore…
A China-linked threat actor called APT17 has been observed targeting Italian companies and government entities using a variant of a known malware referred to a…