Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The malware known as GootLoader continues to be in active use by threat actors looking to deliver additional payloads to compromised hosts."Updates to the Goot…
The supply chain attack targeting the widely-used Polyfill[.]io JavaScript library is broader in scope than previously thought, with new findings from Censys s…
Security threats continue developing rapidly, with attackers finding new vulnerabilities daily. Recent findings from researchers at Uptycs indicate a shift in …
Cloud communications provider Twilio has revealed that unidentified threat actors took advantage of an unauthenticated endpoint in Authy to identify data assoc…
On Independence Day, there is a deep recognition of digital autonomy amidst the colorful fireworks displays and patriotic revelry. At LinuxSecurity, we advocat…
The loader-as-a-service (LaaS) known as FakeBat has become one of the most widespread loader malware families distributed using the drive-by download technique…
An unnamed South Korean enterprise resource planning (ERP) vendor's product update server has been found to be compromised to deliver a Go-based backdoor dubbe…
Linux Mint is a user-friendly GNU/Linux desktop distribution built upon Ubuntu and Debian for maximum reliability while offering an aesthetically pleasing user…
The cybersecurity threat landscape has witnessed a dramatic and alarming rise in the average ransomware payment, an increase exceeding 500%. Sophos, a global l…
Modern CPUs from Intel, including Raptor Lake and Alder Lake, have been found vulnerable to a new side-channel attack that could be exploited to leak sensitive…
A China-nexus cyber espionage group named Velvet Ant has been observed exploiting a zero-day flaw in Cisco NX-OS Software used in its switches to deliver malwa…
Researchers discovered a new Android malware, “Snowblind”, running active campaigns since early 2024. This malware…New Snowblind Android Malware Emerges As A P…
Heads up, WordPress admins! Researchers ask WordPress users to update their sites with the latest…Patch These Compromised WordPress Plugins Asap To Avoid Attac…
Debian recently unveiled a significant update to its stable distribution, Debian 12.6 (codename "bookworm"). While not an entirely new release, this upgrade br…
Installers for three different software products developed by an Indian company named Conceptworld have been trojanized to distribute information-stealing malw…
At the heart of every application are secrets. Credentials that allow human-to-machine and machine-to-machine communication. Machine identities outnumber human…
OpenSSH maintainers have released security updates to contain a critical security flaw that could result in unauthenticated remote code execution with root pri…
Juniper Networks has released out-of-band security updates to address a critical security flaw that could lead to an authentication bypass in some of its route…
The US government reported the OPM Breach, one of the country's greatest hacks, in 2015. Over 22 million past and present employees' personnel records were com…
GitLab has released security updates to address 14 security flaws, including one critical vulnerability that could be exploited to run continuous integration a…
Canonical has made headlines with its groundbreaking long-term support (LTS) service offering to extend far beyond Ubuntu deb packages, promising 12 years of s…
A group of security researchers from the Graz University of Technology have demonstrated a new side-channel attack known as SnailLoad that could be used to rem…
Waltham, Massachusetts, 28th June 2024, CyberNewsWireInfinidat Revolutionizes Enterprise Cyber Storage Protection to Reduce Ransomware and Malware Threat Windo…
TeamViewer on Thursday disclosed it detected an "irregularity" in its internal corporate IT environment on June 26, 2024."We immediately activated our response…
