The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Tel Aviv, Israel, June 22nd, 2023, Cyberwire The industry’s first-ever directory of virtual Chief Information…First Directory of Virtual CISO Providers Launche…
Millions of software repositories on GitHub are likely vulnerable to an attack called RepoJacking, a new study has revealed.This includes repositories from org…
The Chinese cyber espionage actor known asCamaro Dragonhas been observed leveraging a new strain of self-propagating malware that spreads through compromised U…
Several important denial of service (DoS) and information disclosure vulnerabilities have been discovered in the OpenJDK Java runtime. These bugs require no pr…
Fourteen important vulnerabilities have been discovered in Chromium, including multiple use-after-free and type confusion bugs. With a low attack complexity an…
In the digital age, data has become the lifeblood of our interconnected world. It fuels…Norton Parent Ransomware Attack on Latest Hacking News | Cyber Security…
Researchers have devised a new attack strategy to exfiltrate sensitive information from target devices without…Hackers Can Extract Cryptographic Keys Via Devic…
A stealthy and dangerous spyware campaign from the DoNot APT possibly targeted hundreds of Android…DoNot APT Target Android Users With Spyware Via Fake Apps on…
As drone technology becomes commonplace, managing drone security gets crucial. Researchers have demonstrated that in…Researchers Devise New EMFI Attack Leading…
When we do quarterlyplanning, my team categorizes our goals within four evergreen outcomes:Reduce the risk of information security incidentsIncrease trust in V…
In the span of a year leading up to May 2023, over 100,000 stolen ChatGPT…100,000 Stolen ChatGPT Account Credentials Found on Dark Web on Latest Hacking News |…
A new malware calledCondihas been observed exploiting a security vulnerability in TP-Link Archer AX21 (AX1800) Wi-Fi routers to rope the devices into a distrib…
VMware has flagged that a recently patched critical command injection vulnerability in Aria Operations for Networks (formerly vRealize Network Insight) has com…
Zyxel has rolled out security updates to address a critical security flaw in its network-attached storage (NAS) devices that could result in the execution of a…
A highly targeted cyber attack against an East Asian IT company involved the deployment of a custom malware written in Golang calledRDStealer."The operation wa…
Nitrux Update Tool System (NUTS) command-line utility is now available for Nitrux users and it can also perform rollbacks.
Taiwanese company ASUS on Mondayreleased firmware updatesto address, among other issues, nine security bugs impacting a wide range of router models.Of the nine…
A new threat has emerged that exploits a vulnerability in Microsoft Teams. This attack, known…Understanding the Microsoft Teams Vulnerability: The GIFShell Att…
SMS delivery reports not only let the sender know about the message receipt, but can…This Side-Channel Attack Exploits SMS Delivery Reports To Retrieve Locatio…
Heads up, Android users! The latest GravityRAT malware variant now targets Android devices and steals…New GravityRAT Android Malware Variant Steals WhatsApp Ba…
Researchers have found a new malware in the wild actively targeting Windows devices. Identified as…New Skuld Malware Targets Windows To Steal Data on Latest Ha…
A critical security flaw in the WooCommerce plugin Stripe Payment Gateway risked users’ safety. Exploiting…Stripe Payment Gateway Plugin Patched Serious IDOR F…
Fortinet recently patched a critical pre-authentication RCE flaw in its Fortigate firmware. The vulnerability only…Fortinet Quietly Patched Pre-Auth RCE Flaw I…
A new information-stealing malware calledMystic Stealerhas been found to steal data from about 40 different web browsers and over 70 web browser extensions.Fir…