The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Threat actors affiliated with North Korea have been observed leveraging LinkedIn as a way to target developers as part of a fake job recruiting operation.These…
Researchers warns enterprise users about a latest malware campaign targeting Middle East-based firms. The campaign…Hackers Implant Backdoor via Fake Palo Alto …
Roblox developers are the target of a persistent campaign that seeks to compromise systems through bogus npm packages, once again underscoring how threat actor…
This is the August 2024 monthly update for .NET 8. This includes a fix for CVE-2024-38167 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release-…
This is the August 2024 monthly update for .NET 8. This includes a fix for CVE-2024-38167 Release Notes: SDK: https://github.com/dotnet/core/blob/main/release-…
Microsoft's recent patch, intended to strengthen Secure Boot defenses, has resulted in an unexpected setback for Linux-Windows dual-boot setups worldwide. User…
Cybersecurity researchers have uncovered a surge in malware infections stemming from malvertising campaigns distributing a loader called FakeBat."These attacks…
Malicious actors are using a cloud attack tool named Xeon Sender to conduct SMS phishing and spam campaigns on a large scale by abusing legitimate services."At…
This is the July 2024 security updates for .NET 8. Release Notes: SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.7/8.0.107.md Runtime: htt…
A newly discovered attack vector in GitHub Actions artifacts dubbed ArtiPACKED could be exploited to take over repositories and gain access to organizations' c…
The maintainers of the FreeBSD Project have released security updates to address a high-severity flaw in OpenSSH that attackers could potentially exploit to ex…
An ongoing, widespread malware campaign has been observed installing rogue Google Chrome and Microsoft Edge extensions via a trojan distributed via fake websit…
The world of enterprise solutions relies heavily on effective data management. Standard systems, which work great for small businesses, simply break down once …
The North Korea-linked threat actor known as Moonstone Sleet has continued to push malicious npm packages to the JavaScript package registry with the aim of in…
Recently, new information revealed by Doctor Web virus analysts has sent shockwaves through the cybersecurity world. It details a new cyber threat aimed specif…
Cybersecurity companies are warning about an uptick in the abuse of Clouflare's TryCloudflare free service for malware delivery.The activity, documented by bot…
Japanese organizations are the target of a Chinese nation-state threat actor that leverages malware families like LODEINFO and NOOPDOOR to harvest sensitive in…
A new malicious campaign has been observed making use of malicious Android apps to steal users' SMS messages since at least February 2022 as part of a large-sc…
A recently patched security flaw impacting VMware ESXi hypervisors has been actively exploited by "several" ransomware groups to gain elevated permissions and …
Have you ever wondered why your organization needs IT asset management? ITAM or IT asset management ensures your organization's assets are deployed, upgraded, …
French judicial authorities, in collaboration with Europol, have launched a so-called "disinfection operation" to rid compromised hosts of a known malware call…
The U.S. Department of Justice (DoJ) on Thursday unsealed an indictment against a North Korean military intelligence operative for allegedly carrying out ranso…
The Internet Systems Consortium (ISC) has released patches to address multiple security vulnerabilities in the Berkeley Internet Name Domain (BIND) 9 Domain Na…
Cybersecurity researchers have discovered what they say is the ninth Industrial Control Systems (ICS)-focused malware that has been used in a disruptive cyber …