The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A critical memory safety bug has been discovered in Thunderbird 115.0 and Thunderbird 102.13 ( CVE-2023-4056 ). Due to the severity of this vulnerability's thr…
An ongoing campaign is targeting Facebook Business accounts with bogus messages to harvest victims' credentials using a variant of the Python-basedNodeStealera…
The threat actors behind RedLine and Vidar information stealers have been observed pivoting to ransomware through phishing campaigns that spread initial payloa…
This week marked the release of the monthly scheduled security fixes from Microsoft. With the…Microsoft Fixed 59 Bugs With September 2023 Patch Tuesday on Late…
A download manager site served Linux users malware that stealthily stole passwords and other sensitive information for more than three years as part of a suppl…
A high-severity security flaw has been disclosed in N-Able's Take Control Agent that could be exploited by a local unprivileged attacker to gain SYSTEM privile…
IT staffing augmentation involves temporarily hiring external contractors or consultants to supplement a company’s in-house…Ensuring Data Security and Confiden…
Three interrelated high-severity security flaws discovered in Kubernetes could be exploited to achieve remote code execution with elevated privileges on Window…
More details have emerged about a set of now-patched cross-site scripting (XSS) flaws in theMicrosoft Azure HDInsightopen-source analytics service that could b…
A critical vulnerability was found in the OpenDMARC open-source implementation of the DMARC specification. It was discovered that OpenDMARC through 1.3.2 and 1…
We do not often talk about Linux malware because it is often quickly patched up and not exploited much in the wild compared to Windows/macOS. However, there ha…
Application Programming Interfaces (APIs) have become the backbone of modern software development. APIs enable seamless…Ease of Use and Security: Two key aspec…
There is a new battlefield. It is global and challenging to defend. What began with a high-profile incident back in 2007, when Estonia was hit by hackers targe…
A new ransomware family called3AMhas emerged in the wild after it was detected in a single incident in which an unidentified affiliate deployed the strain foll…
Adobe'sPatch Tuesday updatefor September 2023 comes with a patch for a critical actively exploited security flaw in Acrobat and Reader that could permit an att…
A new vulnerability disclosed in GitHub could have exposed thousands of repositories at risk of repojacking attacks, new findings show.The flaw "could allow an…
One of the new Linux networking features we've been looking forward to seeing in the kernel is TCP Authentication Option (TCP-AO / RFC5925) as a means of impro…
SaaS applications are the backbone of modern businesses, constituting a staggering 70% of total software usage. Applications like Box, Google Workplace, and Mi…
A new information stealer malware called MetaStealer has set its sights on Apple macOS, making the latest in a growing list of stealer families focused on the …
Google on Monday rolled out out-of-band security patches to address a critical security flaw in its Chrome web browser that it said has been exploited in the w…
Apple recently patched two vulnerabilities actively exploited in the wild to target iPhones. The researchers…Apple Patched Two iOS Zero-Day Flaws Exploited In …
Heads up, Atlas VPN users! A serious zero-day flaw affects the Atlas VPN Linux client,…Avoid Using Atlas VPN Until A Fix Arrives For The Zero-Day on Latest Hac…
With the growing reliance on web applications and digital platforms, the use of application programming interfaces (APIs) has become increasingly popular. If y…
More RISC-V architecture updates were merged this weekend for the ongoing Linux 6.6 merge window.