The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
VMware is warning of a critical and unpatched security flaw in Cloud Director that could be exploited by a malicious actor to get around authentication protect…
As ransomware attacks continue wreaking havoc, the latest victim turned out to be the largest…ICBC Ransomware Attack – China’s Largest Bank Forced To Use USBs …
A group of academics has disclosed a new "software fault attack" on AMD's Secure Encrypted Virtualization (SEV) technology that could be potentially exploited …
The Redmond giant has recently announced introducing a new privacy feature to its authenticator app.…Microsoft Authenticator Restricts Suspicious MFA Notificat…
Cybersecurity researchers have unmasked a prolific threat actor known as farnetwork, who has been linked to five different ransomware-as-a-service (RaaS) progr…
Multiple ransomware groups have begun to actively exploit recently disclosed flaws in Atlassian Confluence and Apache ActiveMQ.Cybersecurity firm Rapid7saidit …
After inadvertently becoming the vector to spread malware several times, Discord has devised a strategy…Discord Adopts Temporary CDN Links To Prevent Malware o…
After announcing the upgradation of the CVSS 3.0 scoring system in June, this week, FIRST…CVSS 4.0 Arrived As The New Vulnerability Scoring Standard on Latest …
The Government of Canada officially bans using WeChat and Kaspersky apps on government devices, citing…Canada Bans Kaspersky, WeChat On Govt Devices Suspecting…
An advanced strain of malware masquerading as a cryptocurrency miner has managed to fly the radar for over five years, infecting no less than one million devic…
A new set of 48 malicious npm packages have been discovered in the npm repository with capabilities to deploy a reverse shell on compromised systems."These pac…
The Iranian nation-state actor known asMuddyWaterhas been linked to a new spear-phishing campaign targeting two Israeli entities to ultimately deploy a legitim…
The Forum of Incident Response and Security Teams (FIRST) has officially announcedCVSS v4.0, the next generation of the Common Vulnerability Scoring System sta…
State-sponsored threat actors from the Democratic People's Republic of Korea (DPRK) have been found targeting blockchain engineers of an unnamed crypto exchang…
F5 is warning of active abuse of a critical security flaw in BIG-IP less than a week after its public disclosure, resulting in the execution of arbitrary syste…
Atlassian has warned of a critical security flaw in Confluence Data Center and Server that could result in "significant data loss if exploited by an unauthenti…
A pro-Hamas hacktivist group has been observed using a new Linux-based wiper malware dubbedBiBi-Linux Wiper, targeting Israeli entities amidst the ongoing Isra…
Heads up, phpFox users! A critical remote code execution vulnerability existed in the phpFox service…Critical PHPFox RCE Vulnerability Risked Social Networks o…
Days after back-to-back disclosures about actively exploited zero-day vulnerabilities, Cisco has finally patched them with…Patches Released For The Actively Ex…
F5 has alerted customers of a critical security vulnerability impacting BIG-IP that could result in unauthenticated remote code execution.The issue, rooted in …
Taking a step ahead to protect users’ privacy, Google has now decided to test a…Google Plans To Roll Out IP Protection Feature In Chrome Browser on Latest Hack…
VMware has released security updates to address a critical flaw in the vCenter Server that could result in remote code execution on affected systems.The issue,…
Virtualization services provider VMware has alerted customers to the existence of a proof-of-concept (PoC) exploit for a recently patched security flaw in Aria…
With a few days gap, Cisco disclosed active exploitation detections for separate zero-days affecting its…Cisco Discloses Multiple Zero-Days Under Attack In IOS…