The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The Cybersecurity & Infrastructure Security Agency (CISA) added seven new Linux vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on Friday …
Cyber attacks may overwhelm a small business owner. Cybercriminals know this and target small businesses.…Empowering Small Businesses - Unleashing the Cyber De…
Government, aviation, education, and telecom sectors located in South and Southeast Asia have come under the radar of a new hacking group as part of a highly-t…
A new ransomware-as-service (RaaS) operation called MichaelKors has become the latest file-encrypting malware to target Linux andVMware ESXi systemsas of April…
Poorly managed Microsoft SQL (MS SQL) servers are the target of a new campaign that's designed to propagate a category of malware calledCLR SqlShellthat ultima…
In a threatening move, the notorious ransomware group Conti has demanded a $20 million ransom…Conti Ransomware Group Poses $20 Million Threat to Costa Rican Go…
Researchers found numerous applications lacking session cookie validation when transferring data between devices. As observed,…Android Device Migration Tools A…
Shortly after last month’s announcement, Google has now rolled out PassKeys for Google Account supporting…Google Account To Support Passwordless Sign-ins With …
The password management service 1Password assured users of no security breach after accidentally sending “Secret…1Password Confirms No Security Breach After “P…
Researchers caught Trafficstealer actively abusing Docker Container APIs to redirect users to malicious websites. The…Trafficstealer Exploits Container APIs fo…
Researchers have warned Android users of a new malware that steals two-factor authentication (2FA) codes…FluHorse Malware Targets Android Users By Mimicking Le…
Since 41% of organizations are still not confident about their open-source software security, more innovations are needed to change this narrative. Even though…
WordPress is one of the most popular content management systems in the world due to the ability it gives non-technical, inexperienced users to create professio…
Cybersecurity researchers have discovered an ongoing phishing campaign that makes use of a unique attack chain to deliver theXWorm malwareon targeted systems.S…
As many as five security flaws have been disclosed in Netgear RAX30 routers that could be chained to bypass authentication and achieve remote code execution."S…
India's government has reportedly banned 14 messaging apps on national security grounds, including some open source services.
Mozilla never stops and work already started on the next major release of their popular open-source and cross-platform web browser, Firefox 114, which entered …
U.S. cybersecurity and intelligence agencies have warned of attacks carried out by a threat actor known as theBl00dy Ransomware Gangthat attempt to exploit vul…
A security vulnerability has been disclosed in the popular WordPress pluginEssential Addons for Elementorthat could be potentially exploited to achieve elevate…
A security vulnerability has been disclosed in the popular WordPress pluginEssential Addons for Elementorthat could be potentially exploited to achieve elevate…
According to Forrester, External Attack Surface Management (EASM) emerged as a market category in 2021 and gained popularity in 2022. In a different report, Ga…
Several high-severity vulnerabilities have been found in the WebKitGTK web engine, including a use after free issue that may have been actively exploited (CVE-…
It was recently discovered that PHP could be made to bypass password checking if a specially crafted input was provided (CVE-2023-0567).
Multiple threat actors have capitalized on the leak of Babuk (aka Babak or Babyk) ransomware code in September 2021 to build as many as nine different ransomwa…