The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The Redmond giant has introduced a dedicated bug bounty program for its Microsoft Defender security…Microsoft Defender Lures Researchers With Bug Bounty Progra…
Researchers caught a new campaign from the notorious Konni RAT malware exploiting malicious Word files.…Konni RAT Malware Campaign Spreads Via Malicious Word F…
Given the continuous rise in active exploitation of the now-known CitrixBleed flaw, governments issued new…New Alerts Issued For CitrixBleed Flaw Following Act…
An unspecified government entity in Afghanistan was targeted by a previously undocumented web shell called HrServ in what’s suspected to be an advanced persist…
The maintainers of the open-source file-sharing software ownCloud have warned of three critical security flaws that could be exploited to disclose sensitive in…
More details have emerged about a malicious Telegram bot called Telekopye that's used by threat actors to pull off large-scale phishing scams."Telekopye can cr…
Cybersecurity researchers have shed light on a Rust version of a cross-platform backdoor called SysJoker, which is assessed to have been used by a Hamas-affili…
A new phishing attack has been observed leveraging a Russian-language Microsoft Word document to deliver malware capable of harvesting sensitive information fr…
Delivery- and shipping-themed email messages are being used to deliver a sophisticated malware loader known as WailingCrab."The malware itself is split into mu…
Modern security tools continue to improve in their ability to defend organizations’ networks and endpoints against cybercriminals. But the bad actors still occ…
A North Korean state-sponsored threat actor tracked asDiamond Sleetis distributing a trojanized version of a legitimate application developed by a Taiwanese mu…
A North Korean state-sponsored threat actor tracked as Diamond Sleet is distributing a trojanized version of a legitimate application developed by a Taiwanese …
North Korean threat actors have been linked to two campaigns in which they masquerade as both job recruiters and seekers to distribute malware and obtain unaut…
The Government of Canada recently admitted suffering a security breach that impacted data of current…Canada Government Admits Data Breach Impacting Public Empl…
Multiple threat actors, including LockBit ransomware affiliates, are actively exploiting a recently disclosed critical security flaw in Citrix NetScaler applic…
The ransomware strain known as Play is now being offered to other threat actors "as a service," new evidence unearthed by Adlumin has revealed."The unusual lac…
A new variant of the Agent Tesla malware has been observed delivered via a lure file with the ZPAQ compression format to harvest data from several email client…
The Kinsing threat actors are actively exploiting a critical security flaw in vulnerable Apache ActiveMQ servers to infect Linux systems with cryptocurrency mi…
Android smartphone users in India are the target of a new malware campaign that employs social engineering lures to install fraudulent apps that are capable of…
Researchers have found numerous security vulnerabilities in Google Workspace that risk breaches. While the vulnerabilities…Google Workspace Vulnerabilities Ris…
A set of novel attack methods has been demonstrated against Google Workspace and the Google Cloud Platform that could be potentially leveraged by threat actors…
Phishing campaigns delivering malware families such as DarkGate and PikaBot are following the same tactics previously used in attacks leveraging the now-defunc…
Months after ensuring that the patch actually works, Google has now disclosed more details about…Google Elaborates On Campaigns Exploiting A Now-Patched Zimbra…
Intel recently released a critical security fix for a newly discovered vulnerability affecting its CPUs.…Intel Released Urgent Patch For Reptar Vulnerability I…