The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A significant challenge within cyber security at present is that there are a lot of risk management platforms available in the market, but only some deal with …
The threat actor known as Patchwork likely used romance scam lures to trap victims in Pakistan and India, and infect their Android devices with a remote access…
Multiple security vulnerabilities have recently been discovered in the XOrg Server prior to 21.1.11, and Xwayland display implementations prior to 23.2.4. Thes…
Multiple security vulnerabilities have recently been discovered in the XOrg Server prior to 21.1.11, and Xwayland display implementations prior to 23.2.4. Thes…
The dynamic Kubernetes security landscape has given rise to several trends shaping how organizations approach this increasingly critical area. The aim of Kuber…
The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) announced sanctions against six officials associated with the Iranian intelligence agenc…
The decentralized social network Mastodon has disclosed a critical security flaw that enables malicious actors to impersonate and take over any account."Due to…
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned that more than 2,000 computers in the country have been infected by a strain of malware ca…
Cloudzy, a prominent cloud infrastructure provider, proudly announces a significant enhancement in its cybersecurity landscape. This breakthrough has been achi…
An INTERPOL-led collaborative operation targeting phishing, banking malware, and ransomware attacks has led to the identification of 1,300 suspicious IP addres…
Data security in a modern business environment is considered one of the most critical factors for any company. The digitalization of the world has led to more …
The threat actor behind a peer-to-peer (P2P) botnet known as FritzFrog has made a return with a new variant that leverages the Log4Shell vulnerability to propa…
Data security in a modern business environment is considered one of the most critical factors for any company. The digitalization of the world has led to more …
Exposed Docker API endpoints over the internet are under assault from a sophisticated cryptojacking campaign called Commando Cat."The campaign deploys a benign…
How’s your vulnerability management program doing? Is it effective? A success? Let’s be honest, without the right metrics or analytics, how can you tell how we…
Ivanti has warned all Connect Secure and Policy Secure users to immediately update their systems…Two Ivanti Zero-Day Vulnerabilities Demand Immediate User Atte…
Google-owned Mandiant said it identified new malware employed by a China-nexus espionage threat actor known as UNC5221 and other threat groups during post-expl…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity flaw impacting iOS, iPadOS, macOS, tvOS, and watchOS to its…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity flaw impacting iOS, iPadOS, macOS, tvOS, and watchOS to its…
The networking giant Cisco addressed a severe security flaw affecting its Unified Communications Products. Exploiting…Cisco Fixed Critical RCE Flaw In Unified …
Cybersecurity researchers are calling attention to the "democratization" of the phishing ecosystem owing to the emergence of Telegram as an epicenter for cyber…
The SEC isn’t giving SaaS a free pass. Applicable public companies, known as “registrants,” are now subject to cyber incident disclosure and cybersecurity read…
A financially motivated threat actor known as UNC4990 is leveraging weaponized USB devices as an initial infection vector to target organizations in Italy.Goog…
Days after releasing a major update, GitLab rolled out another emergency update addressing a serious…GitLab Patched A Workspace Creation Vulnerability With An …