Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An analysis of the "evasive and tenacious" malware known as QBot has revealed that 25% of its command-and-control (C2) servers are merely active for a single d…
Microsoft has shared details of a now-patched flaw in Apple macOS that could be abused by threat actors with root access to bypass security enforcements and pe…
WhatsApp now empowers users to protect specific chats from others holding their devices. The new…Protect Your WhatsApp Chats From Snoopers With Chat Lock on La…
Are you concerned about ransomware attacks? You're not alone. In recent years, these attacks have become increasingly common and can cause significant damage t…
Search giant Google on Monday unveiled a major update to its12-year-oldAuthenticator app for Android and iOS with an account synchronization option that allows…
A new piece of malware dubbeddotRunpeXis being used to distribute numerous known malware families such asAgent Tesla,Ave Maria,BitRAT,FormBook,LokiBot,NetWire,…
TheDark Pinkadvanced persistent threat (APT) actor has been linked to a fresh set of attacks targeting government and military entities in Southeast Asian coun…
Six different law firms were targeted in January and February 2023 as part of two disparate threat campaigns distributingGootLoaderandFakeUpdates(aka SocGholis…
A new financially motivated campaign that commenced in December 2022 has seen the unidentified threat actor behind it deploying a novel ransomware strain dubbe…
The Gootkit malware is prominently going after healthcare and finance organizations in the U.S., U.K., and Australia, according to new findings from Cybereason…
In a continuing sign that threat actors are adapting well to apost-macro world, it has emerged that the use of Microsoft OneNote documents to deliver malware v…
The Emotet malware operation has continued to refine its tactics in an effort to fly under the radar, while also acting as a conduit for other dangerous malwar…
Remote access trojans such as StrRAT and Ratty are being distributed as a combination of polyglot and malicious Java archive (JAR) files, once again highlighti…
A recent wave of Gootkit malware loader attacks has targeted the Australian healthcare sector by leveraging legitimate tools like VLC Media Player.Gootkit, als…
Microsoft on Thursday flagged a cross-platform botnet that's primarily designed to launch distributed denial-of-service (DDoS) attacks against private Minecraf…
Researchers have discovered a critical remote code execution vulnerabilities in numerous remote keyboard apps for…Critical Vulnerabilities Found In Android Rem…
Apple on Wednesdayannounceda raft of security measures, including an Advanced Data Protection setting that enables end-to-end encrypted (E2EE) data backups in …
Popular password management service LastPass said it's investigating a second security incident that involved attackers accessing some of its customer informat…
An update that solves three vulnerabilities and has 18 fixes is now available.
rubygem-rack: crafted requests can cause shell escape sequences (CVE-2022-30123) * jquery: Prototype pollution in object's prototype leading to denial of servi…
An update that solves 5 vulnerabilities and has 39 fixes is now available.
Update to the September 2022 update release of .NET Core 3.1 Release Notes: https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.29/3.1.29.md This in…
Update to the September 2022 update release of .NET Core 3.1 Release Notes: https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.29/3.1.29.md This in…
An update that solves four vulnerabilities and has 36 fixes is now available.
