The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
After being deprecated for several years, Security Enhanced Linux "SELinux" beginning with the Linux 6.4 kernel can no longer be run-time disabled.
Researchers found active exploitation of the Eval PHP WordPress plugin to deploy backdoors on target…Hackers Abuse Outdated Eval PHP WordPress Plugin To Deploy…
A severe zero-day vulnerability, identified as the “GhostToken” flaw, could allow an adversary to infect…GhostToken Zero-Day Vulnerability Found In Google Clou…
After wreaking havoc with Windows and Linux systems, the LockBit ransomware gang now intends to…Lockbit Ransomware Aims To Target macOS Systems – But May Not B…
Considering a new smart home system or thinking about upgrading your new ones? Here are…7 Security Tips When Setting Up Your Smart Home on Latest Hacking News …
Security researchers have recently discovered that Linux users targeted with malware in the new “Operation DreamJob”Lazarus campaignfor the first time.
Society and governments are struggling to adapt to a world full of cybersecurity threats. Case in point: the EU CRA '' Cyber Resilience Act '' is a proposal by…
Lazarus, the prolific North Korean hacking group behind the cascadingsupply chain attack targeting 3CX, also breached two critical infrastructure organizations…
Cybersecurity researchers have disclosed details of a now-patched zero-day flaw in Google Cloud Platform (GCP) that could have enabled threat actors to conceal…
Several high-impact remotely exploitable vulnerabilities were recently discovered in the popular Chromium free and open-source web browser. These issues could …
The supply chain attack targeting 3CX was the result of a prior supply chain compromise associated with a different company, demonstrating a new level of sophi…
Days after the horrifying cyberattack, more details about the 3CX incident surface online as Mandiant…3CX Cyber Attack: It Was The Aftermath Of Another Supply-…
Cisco and VMware have released security updates to address critical security flaws in their products that could be exploited by malicious actors to execute arb…
A chain of two critical flaws has been disclosed in Alibaba Cloud's ApsaraDB RDS for PostgreSQL and AnalyticDB for PostgreSQL that could be exploited to breach…
Researchers have found new malware targeting web browsers in active campaigns. Identified as the Zaraza…Zaraza Malware Exploits Web Browsers To Steal Stored Pa…
Why is Visibility into OT Environments Crucial?The significance of Operational Technology (OT) for businesses is undeniable as the OT sector flourishes alongsi…
The notorious North Korea-aligned state-sponsored actor known as theLazarus Grouphas been attributed to a new campaign aimed at Linux users.The attacks are par…
Fortra, the company behind Cobalt Strike, shed light on a zero-day remote code execution (RCE) vulnerability in its GoAnywhere MFT tool that has come underacti…
In the short time since their inception, ChatGPT and other generative AI platforms have rightfully gained the reputation of ultimate productivity boosters. How…
This release also ships with the latest Tor Browser 12.0.5 anonymous web browser and Linux kernel 6.1.20 LTS.
The latest Kabuntu laptop marries security-first hardware with its Linux-based operating system. Here are three features in particular that stand out.
Following a high-severity zero-day fix, Google has patched another severe zero-day vulnerability in its Chrome…Google Patched Second Chrome Zero-Day Within A W…
The cyber espionage actor tracked asBlind Eaglehas been linked to a new multi-stage attack chain that leads to the deployment of the NjRAT remote access trojan…
Google on Tuesday rolled out emergency fixes to address another actively exploited high-severity zero-day flaw in its Chrome web browser.The flaw, tracked asCV…