The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Researchers found numerous vulnerabilities affecting Peloton Treadmill systems that allow malware attacks. An adversary may…Peloton Treadmill Vulnerabilities R…
Fall of August 1991: Linus Torvalds, a student at the University of Helsinki, creates an operating system as a hobby. The motive? Creating a free, open-source …
The Abyss Locker operation is the latest to develop a Linux encryptor to target VMware's ESXi virtual machines platform in attacks on the enterprise.
Days after the details about a severe zero-day vulnerability in Ivanti mobile management software surfaced…Ivanti Warns Of Another EPMM Zero-Day Flaw Under Att…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday disclosed details of a "novel persistent backdoor" called SUBMARINE deployed by thre…
Cilium , an open-source networking, security and observability project, has released version 1.14 with an array of connectivity, security and observability upd…
A new Android malware strain calledCherryBloshas been observed making use of optical character recognition (OCR) techniques to gather sensitive data stored in …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday disclosed details of a "novel persistent backdoor" calledSUBMARINEdeployed by threat…
Ivanti has disclosed yet another security flaw impacting Endpoint Manager Mobile (EPMM), formerly known as MobileIron Core, that it said has been weaponized as…
Zimbra recently addressed a severe zero-day vulnerability found actively exploited in the wild. While the…Zimbra Patched An XSS Zero-Day Vulnerability Under Ac…
The threat actors linked to the malware loader known as IcedID have made updates to the BackConnect (BC) module that's used for post-compromise activity on hac…
As part ofCheckmarx's missionto help organizations develop and deploy secure software, the Security Research team started looking at the security posture of ma…
Thank you to Ruth Webb for contributing this article.WordPress stands tall as one of the most popular content management systems (CMS), empowering millions of …
AMD recently addressed a critical vulnerability affecting its Zen2 CPUs. Named “Zenbleed,” the researcher who…New Zenbleed Attack Threatens AMD Zen2 CPUs – Pat…
Users of Metabase, a popular business intelligence and data visualization software package, are being advised to update to the latest version following the dis…
Cybersecurity agencies in Australia and the U.S. havepublisheda joint cybersecurity advisory warning against security flaws in web applications that could be e…
Heads up, MikroTik users! The router firm has recently patched a critical-severity privilege escalation flaw…Critical Privilege Escalation Flaw Risks 900K+ Mik…
Cybersecurity researchers have disclosed two high-severity security flaws in the Ubuntu kernel that could pave the way for local privilege escalation attacks.C…
As cloud applications are built, tested and updated, they wind their way through an ever-complex series of different tools and teams. Across hundreds or even t…
Two new Linux kernel privilege escalation flaws have been discovered in the OverlayFS module in Ubuntu, which affect nearly 40% of Ubuntu users (CVE-2023-2640 …
Heads up, gamers! If you receive access codes for seemingly lucrative blockchain games, beware! A…Fake Games Deliver Redline, Realst Malware On Windows and Mac…
Organizations using the Ivanti EPMM mobile management software must update their systems immediately as hackers…Ivanti Mobile Management Software Zero-Day Unde…
The U.S. Securities and Exchange Commission (SEC) on Wednesday approved new rules that require publicly traded companies to publicize details of a cyber attack…
Flipper Zero users can now install third-party apps on their devices as the providers roll…Flipper Zero Launched “Apps Hub” As A Third-Party App Store on Lates…