The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
After targeting mobile users for about a year, the CryptoRom scam is again active in…Researchers Find CryptoRom Scam Active Via Sideloaded Apps on Latest Hacki…
A new ransomware threat has emerged online that is already active in the wild. Identified…New Golang-based Epsilon Red Ransomware Caught Executing Active Attac…
Heads up, Android users. A new zero-day is under active exploitation in the wild targeting…Now-Patched Android Zero-Day Actively Exploited For Targeted Attacks…
The old banking trojan QBot has surfaced online once again as researchers discovered its new variant active in the wild.QBot Trojan Comes Back With New Nasty T…
Microsoft alerted all its users to stay vigilant with regard to PonyFinal ransomware attacks. Since the ransomware attacks are activeMicrosoft Warns Of PonyFin…
Oracle alerts users to update their systems at the earliest as they spot active exploitation of recently patched WebLogic bug.Oracle Alerts Users About Active …
Researchers have found a malware operation in the wild targeting docker servers. Dubbed Kinsing, the malware is actively targeting DockerKinsing Malware Active…
Researchers have found a malware operation in the wild targeting docker servers. Dubbed Kinsing, the malware is actively targeting DockerKinsing Malware Active…
School management firm Active Network has revealed a data breach. The incident primarily took place due to the attackers compromisingSchool Management Software…
The Magecart attackers seem very active these days. Carrying on with their malicious campaign, they have once again preyed onUK Activewear Retailer Sweaty Bett…
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active…
Apache’s release notice on Oct 3, 2026 lists six Apache Directory LDAP API vulnerabilities.
Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and r…
An important security update for Python 3.12 on Rocky Linux 10 addresses a vulnerability allowing directory bypass during tarfile extraction, with a CVSS score…
The Fedora 43 update for rust-git-interactive-rebase-tool links applications to an updated libgit2 library, addressing several security vulnerabilities from th…
The Fedora update for rust-git-interactive-rebase-tool includes a rebuild with the latest libgit2-sys crate, addressing multiple security vulnerabilities from …
CVE-2026-16232 lets an unauthenticated attacker seize full admin control of Check Point's management console. Check Point confirms in-the-wild attacks, and a R…
A significant security update is available for plexus-utils on Rocky Linux 9, addressing a directory traversal vulnerability (CVE-2025-67030) with a CVSS score…
Kate Deplaix reported that .install file directives were insufficiently restricted in OPAM, a package manager for OCaml. Installing files through .install file…
Kate Deplaix reported that .install file directives were insufficiently restricted in OPAM, a package manager for OCaml. Installing files through .install file…
A vulnerability have been discovered in dpkg, the Debian package manager (dpkg is the low-level tool that actually installs or removes packages). CVE-2025-6297…
A critical flaw in Gitea's official Docker image let anyone impersonate an admin with one forged header. Sysdig spotted the first exploitation attempts 13 days…
Cisco has released security updates for a medium-severity security flaw in Catalyst SD-WAN Manager that has come under active exploitation in the wild.The vuln…
CISA added CVE-2026-11645 to its Known Exploited Vulnerabilities catalog after Google confirmed active exploitation of the flaw. The bug sits in V8, the JavaSc…