Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Progress Software has released hotfixes for a critical security vulnerability, alongside seven other flaws, in the WS_FTP Server Ad hoc Transfer Module and in …
Cisco is warning of attempted exploitation of a security flaw in its IOS Software and IOS XE Software that could permit an authenticated remote attacker to ach…
Cybersecurity agencies from Japan and the U.S. have warned of attacks mounted by a state-backed hacking group from China to stealthily tamper with branch route…
The landscape of browser security has undergone significant changes over the past decade. While Browser Isolation was once considered the gold standard for pro…
Google on Wednesday rolled out fixes to address a new actively exploited zero-day in the Chrome browser.Tracked asCVE-2023-5217, the high-severity vulnerabilit…
Heads up, Apple users! Researchers have caught active exploitation of three zero-day flaws in Apple…Apple Zero-Day Flaws Exploited For Predator Spyware Attacks…
A novel side-channel attack calledGPU.ziprenders virtually all modern graphics processing units (GPU) vulnerable to information leakage."This channel exploits …
Data security is in the headlines often, and it’s almost never for a positive reason. Major breaches, new ways to hack into an organization’s supposedly secure…
A new malware strain called ZenRAT has emerged in the wild that's distributed via bogus installation packages of the Bitwarden password manager."The malware is…
Google has assigned a new CVE identifier for a critical security flaw in the libwebp image library for rendering images in theWebP formatthat has come under ac…
Cybersecurity experts have shed light on a new cybercrime group known asShadowSyndicate(formerly Infra Storm) that may have leveraged as many as seven differen…
SOC 2, ISO, HIPAA, Cyber Essentials – all the security frameworks and certifications today are an acronym soup that can make even a compliance expert’s head sp…
How To Use This ReportEnhance situational awareness of techniques used by threat actorsIdentify potential attacks targeting your industryGain insights to help …
How To Use This ReportEnhance situational awareness of techniques used by threat actorsIdentify potential attacks targeting your industryGain insights to help …
LinuxSecurity.com has been using the open-source Joomla content management system (CMS) and PHP scripting language for nearly three decades and recently comple…
Continuing its efforts for users’ account security, GitHub takes another step as it releases passkey…GitHub Makes Passkey For Passwordless Logins Publicly Avai…
Cybersecurity researchers have discovered a previously undocumented advanced backdoor dubbedDeadglyphemployed by a threat actor known as Stealth Falcon as part…
Thethree zero-day flawsaddressed by Apple on September 21, 2023, were leveraged as part of an iPhone exploit chain in an attempt to deliver a spyware strain ca…
After serving users with one of the most resilient end-to-end encryption protocols for communication, Signal…Signal Upgrades Its E2E Encryption With Quantum Re…
The peer-to-peer (P2) worm known asP2PInfecthas witnessed a surge in activity since late August 2023, witnessing a 600x jump between September 12 and 19, 2023.…
Security teams are familiar with threats emanating from third-party applications that employees add to improve their productivity. These apps are inherently de…
China's Ministry of State Security (MSS) has accused the U.S. of breaking into Huawei's servers, stealing critical data, and implanting backdoors since 2009, a…
A financially motivated threat actor has been outed as an initial access broker (IAB) that sells access to compromised organizations for other adversaries to c…
The maintainers of Free Download Manager (FDM) have acknowledged a security incident dating back to 2020 that led to its website being used to distribute malic…
