Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Recent enhancements have been made to GitHub Actions , a feature of GitHub that enables automation and CI/CD processes for developer teams. The updates focus o…
A recent data breach incident disclosed by the OWASP Foundation due to a wiki misconfiguration highlights a critical concern for security practitioners, specif…
Attack surface management (ASM) and vulnerability management (VM) are often confused, and while they overlap, they’re not the same. The main difference between…
A critical security flaw impacting the LayerSlider plugin for WordPress could be abused to extract sensitive information from databases, such as password hashe…
Ransomware targeting Linux systems is a growing threat, particularly in IoT ecosystems. Cybersecurity analysts are presenting live forensic techniques to detec…
The importance of prioritizing memory-safe programming languages has never been greater. Using memory-safe programming languages such as Python, Java, C#, Go, …
The malicious code inserted into the open-source library XZ Utils, a widely used package present in major Linux distributions, is also capable of facilitating …
Cloud solutions are more mainstream – and therefore more exposed – than ever before.In 2023 alone, a staggering 82% of data breaches were against public, priva…
A threat activity cluster tracked as Earth Freybug has been observed using a new malware called UNAPIMON to fly under the radar."Earth Freybug is a cyberthreat…
Fedora 40 beta , the newest version of the Fedora operating system, is an efficient and lightning-fast release with various new and useful features. Compared t…
Despite a plethora of available security solutions, more and more organizations fall victim to Ransomware and other threats. These continued threats aren't jus…
Several malicious Android apps that turn mobile devices running the operating system into residential proxies (RESIPs) for other threat actors have been observ…
In the world of open-source software , security vulnerabilities can have widespread consequences. The recent publication of a Linux privilege-escalation proof-…
A Linux version of the multi-platform backdoor malware called DinodasRAT has been spotted in cyberattacks across several countries. The malware, also known as …
A backdoor in the widely used xz compression utility has been discovered, posing a severe threat to Linux users. The issue is tracked as CVE-2024-3094 and has …
Malicious ads and bogus websites are acting as a conduit to deliver two different stealer malware, including Atomic Stealer, targeting Apple macOS users.The on…
A critical vulnerability has been found in the wall command of the util-linux package that poses a severe security threat to Linux systems. This vulnerability,…
The maintainers of the Python Package Index (PyPI) repository briefly suspended new user sign-ups following an influx of malicious projects uploaded as part of…
A Linux version of a multi-platform backdoor called DinodasRAT has been detected in the wild targeting China, Taiwan, Turkey, and Uzbekistan, new findings from…
The Police of Finland (aka Poliisi) has formally accused a Chinese nation-state actor tracked as APT31 for orchestrating a cyber attack targeting the country's…
GoPlus Labs, the leading Web3 security infrastructure provider, has unveiled a groundbreaking report that highlights…GoPlus’s Latest Report Highlights How Bloc…
In 2023 alone, more than 10 customers and partners signed commercial agreements with C2A Security,…C2A Security’s EVSec Risk Management and Automation Platform…
Cybersecurity researchers from ETH Zurich have developed a new variant of the RowHammer DRAM (dynamic random-access memory) attack that, for the first time, su…
Considering the ever-changing state of cybersecurity, it's never too late to ask yourself, "am I doing what's necessary to keep my organization's web applicati…
