The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A novel malware campaign has been observed targeting Redis servers for initial access with the ultimate goal of mining cryptocurrency on compromised Linux host…
The U.K. National Crime Agency (NCA) on Tuesday confirmed that it obtained LockBit's source code as well as a wealth of intelligence pertaining to its activiti…
Data security in a modern business environment is considered one of the most critical factors for any company. The digitalization of the world has led to more …
Microsoft on Friday revealed that it was the target of a nation-state attack on its corporate systems that resulted in the theft of emails and attachments from…
Mobile network operator Orange Spain suffered an internet outage for several hours on January 3 after a threat actor used administrator credentials captured by…
The threat actor known as Lace Tempest has been linked to the exploitation of a zero-day flaw in SysAid IT support software in limited attacks, according to ne…
Pro-Russian hacking groups have exploited a recently disclosed security vulnerability in the WinRAR archiving utility as part of a phishing campaign designed t…
Microsoft has detailed a new campaign in which attackers unsuccessfully attempted to move laterally to a cloud environmentthrough an SQL Server instance."The a…
Cybersecurity agencies in Australia and the U.S. havepublisheda joint cybersecurity advisory warning against security flaws in web applications that could be e…
Ransomware actors and cryptocurrency scammers have joined nation-state actors in abusing cloud mining services to launder digital assets, new findings reveal."…
Two "dangerous" security vulnerabilities have been disclosed in Microsoft Azure Bastion and Azure Container Registry that could have been exploited to carry ou…
Spanish-speaking users in Latin America have been at the receiving end of a new botnet malware dubbedHorabotsince at least November 2020."Horabot enables the t…
Multiple threat actors have capitalized on the leak of Babuk (aka Babak or Babyk) ransomware code in September 2021 to build as many as nine different ransomwa…
A little-known Russian-speaking cyber-espionage group has been linked to a new politically-motivated surveillance campaign targeting high-ranking government of…
After wreaking havoc with Windows and Linux systems, the LockBit ransomware gang now intends to…Lockbit Ransomware Aims To Target macOS Systems – But May Not B…
Enterprise communications service provider 3CX confirmed that thesupply chain attacktargeting its desktop application for Windows and macOS was the handiwork o…
The notorious Emotet malware, in itsreturn after a short hiatus, is now being distributed viaMicrosoft OneNote email attachmentsin an attempt to bypass macro-b…
A widespread malicious cyber operation has hijacked thousands of websites aimed at East Asian audiences to redirect visitors to adult-themed content since earl…
Written by Linux security expert and LinuxSecurity.com Founder Dave Wreski.Attacks targeting Linux have surged in recent years due to the mass migration of wor…
Law enforcement authorities from Germany and Ukraine have targeted suspected core members of a cybercrime group that has been behind large-scale attacks using …
Romanian cybersecurity company Bitdefender hasreleaseda free universal decryptor for a nascent file-encrypting malware known as MortalKombat.MortalKombat is a …
Ransomware attacks have become increasingly common and can have devastating consequences for businesses, and it…Strategies for Managing Security Posture and Pr…
A Rust variant of a ransomware strain known asAgendahas been observed in the wild, making it the latest malware to adopt the cross-platform programming languag…
Microsoft on Tuesday disclosed it took steps to implement blocking protections and suspend accounts that were used to publish malicious drivers that were certi…