The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
In 2023, the global average cost of a data breach reached$4.45 million. Beyond the immediate financial loss, there are long-term consequences like diminished c…
The threat actors linked toKinsinghave been observed attempting to exploit the recently disclosed Linux privilege escalation flaw called Looney Tunables as par…
In today's digital landscape, around60%of corporate data now resides in the cloud, with Amazon S3 standing as the backbone of data storage for many major corpo…
Passwords are at the core of securing access to an organization's data. However, they also come with security vulnerabilities that stem from their inconvenienc…
Nearly three dozen counterfeit packages have been discovered in the npm package repository that are designed to exfiltrate sensitive data from developer system…
With the growing reliance on web applications and digital platforms, the use of application programming interfaces (APIs) has become increasingly popular. If y…
[BLACK HAT] Googlers have lately found not one but two more security vulnerabilities in Intel and AMD processors that can be exploited to steal sensitive data …
A new Golang-based information stealer calledSkuldhas compromised Windows systems across Europe, Southeast Asia, and the U.S."This new malware strain tries to …
Email protection and network security services provider Barracuda is warning users about a zero-day flaw that it said has been exploited to breach the company'…
Lazarus, the prolific North Korean hacking group behind the cascadingsupply chain attack targeting 3CX, also breached two critical infrastructure organizations…
A new information-stealing malware has set its sights on Apple's macOS operating system to siphon sensitive information from compromised devices.DubbedMacSteal…
A malicious Python package on the Python Package Index (PyPI) repository has been found to use Unicode as a trick to evade detection and deploy an info-stealin…
Web hosting services provider GoDaddy on Friday disclosed a multi-year security breach that enabled unknown threat actors to install malware and siphon source …
The popular social media networking giant Reddit has appeared as the latest victim of a…Reddit Discloses Security Breach Affecting Internal Docs on Latest Hack…
Here are three of the worst breaches, attacker tactics and techniques of 2022, and the security controls that can provide effective, enterprise security protec…
Popular email marketing and newsletter service Mailchimp has disclosed yet another security breach that enabled threat actors to access an internal support and…
Ransomware attacks have become increasingly common and can have devastating consequences for businesses, and it…Strategies for Managing Security Posture and Pr…
A group of academics has demonstrated novel attacks that leverage Text-to-SQL models to produce malicious code that could enable adversaries to glean sensitive…
Cloud services provider Rackspace on Thursday confirmed that the ransomware gang known as Play was responsible for last month's breach.The security incident, w…
Researchers have discovered a severe bug in the Safari 15 browser that potentially leaks a…Safari 15 Browser Vulnerability Potentially Exposes User Data – Appl…
Europol, the European Union's premier law enforcement agency, hasannouncedthe arrest of a third Romanian national for his role as a ransomware affiliate suspec…
A previously undocumented, financially motivated threat group has been connected to a string of data theft and extortion attacks on over 40 entities between Se…
McDonald's recently made a blunder when sending emails to prize winners. What McDonald's now confirmed…McDonald’s Erroneously Leaked Credentials to Monopoly VI…
Linux ransomware is on the rise , and an attack on your system could result in the loss of critical data and significant downtime - if important files have not…