The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
With the growing reliance on web applications and digital platforms, the use of application programming interfaces (APIs) has become increasingly popular. If y…
More RISC-V architecture updates were merged this weekend for the ongoing Linux 6.6 merge window.
A new malware loader called HijackLoader is gaining traction among the cybercriminal community to deliver various payloads such asDanaBot,SystemBC, andRedLine …
Since early this year AMD has been working on Linux enablement patches for Dynamic Boost Control (DBC). This is a new feature of some AMD SoCs that allow an "a…
The recent news regarding Red Hat's decision to limit access to the source code of their Red Hat Enterprise Linux (RHEL) distribution has garnered considerable…
Microsoft Internet Information Services (IIS) is a web server software package designed for Windows Server. Organizations commonly use Microsoft IIS servers to…
In the world of web development, terms like MEAN, MERN, LEMP, and PERN are frequently encountered. These terms refer to web stacks, which are bundles of softwa…
The usage of Blueshell malware spikes up by various threat actors to target Windows, Linux, and other operating systems across Korea and Thailand.
Threat actors associated with North Korea arecontinuingtotargetthe cybersecurity community using a zero-day bug in an unspecified software over the past severa…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday warned that multiple nation-state actors are exploiting security flaws in Fortinet…
A new malvertising campaign has been observed distributing an updated version of a macOS stealer malware calledAtomic Stealer(or AMOS), indicating that it’s be…
By the end of 2024, the number of MSPs and MSSPs offering vCISO services is expected to grow by almost 5 fold, as can be seen in figure 1. This incredible surg…
Patches have been released to address two new securityvulnerabilities in Apache Supersetthat could be exploited by an attacker to gain remote code execution on…
Two major security vulnerabilities were recently discovered in PHP. It was discovered that PHP incorrectly handled certain XML files ( CVE-2023-3823 ) and cert…
AMirai botnetvariant calledPandorahas been observed infiltrating inexpensive Android-based TV sets and TV boxes and using them as part of a botnet to perform d…
Microsoft on Wednesday revealed that a China-based threat actor known asStorm-0558acquired the inactive consumer signing key to forge tokens and access Outlook…
Microsoft on Wednesday revealed that a China-based threat actor known asStorm-0558acquired the inactive consumer signing key to forge tokens and access Outlook…
Nine security flaws have been disclosed in electric power management products made by Schweitzer Engineering Laboratories (SEL).“The most severe of those nine …
Tel Aviv, Israel, Sep 05, 2023 — Reflectiz, a cybersecurity company specializing in continuous web…Holiday Season Cyber Alert: Reflectiz Declares War on Mageca…
An updated version of a malware loader known as BLISTER is being used as part of SocGholish infection chains to distribute an open-source command-and-control (…
Banking and logistics industries are under the onslaught of a reworked variant of a malware calledChaes."It has undergone major overhauls: from being rewritten…
In today's digital age, it's not just about being online but how securely your organization operates online. Regardless of size or industry, every organization…
IBM's 2023 installment of their annual "Cost of a Breach" report has thrown up some interesting trends. Of course, breaches being costly is no longer news at t…
The North Korean threat actor known asAndarielhas been observed employing an arsenal of malicious tools in its cyber assaults against corporations and organiza…