Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Microsoft on Tuesday said it took steps to disable fake Microsoft Partner Network (MPN) accounts that were used for creating maliciousOAuthapplications as part…
Two more supply chain security flaws have been disclosed in AMI MegaRAC Baseboard Management Controller (BMC) software, nearly two months afterthree security v…
VoIP services are becoming more and more popular year after year. The volume of the…Threats to VoIP Security Are Rising on Latest Hacking News | Cyber Security…
The Russia-affiliated Sandworm used yet another wiper malware strain dubbedNikoWiperas part of an attack that took place in October 2022 targeting an energy se…
A shellcode-basedpackerdubbedTrickGatehas been successfully operating without attracting notice for over six years, while enabling threat actors to deploy a wi…
Taiwanese company QNAP has released updates to remediate a critical security flaw affecting its network-attached storage (NAS) devices that could lead to arbit…
A researcher won a hefty bounty for reporting a severe two-factor authentication (2FA) bypass bug…Serious 2FA Bypass Vulnerability Affected Facebook And Instag…
Open source security automation is a critical aspect of modern cybersecurity. It involves the use of open source tools and technologies to automate various sec…
Published back in November were a set of patches for allowing (e)BPF to extend the Linux kernel's scheduler . That interesting work is continuing with Friday h…
Merged on Sunday prior to tagging Linux 6.2-rc6 is a late "fix" for the AMD Secure Encrypted Virtualization Secure Nested Paging (SEV-SNP) code to avoid possib…
A new Golang-based information stealer malware dubbedTitan Stealeris being advertised by threat actors through their Telegram channel."The stealer is capable o…
Researchers discovered numerous vulnerabilities in the Yellowfin BI platform that could allow remote code execution…Multiple Vulnerabilities In Yellowfin BI Co…
Researchers discovered multiple vulnerabilities in the LearnPress WordPress plugin, allowing SQL injection and file inclusion…LearnPress Plugin Vulnerabilities…
Researchers are warning about a spike in exploitation attempts weaponizing a now-patched critical remote code execution flaw in Realtek Jungle SDK since the st…
The threat actors associated with the Gootkit malware have made "notable changes" to their toolset, adding new components and obfuscations to their infection c…
In 2022, the Open Source Software Foundation (OpenSSF) set its sights on fixing security problems with the open software supply chain. including joining forces…
The Internet Systems Consortium (ISC) has released patches to address multiple security vulnerabilities in the Berkeley Internet Name Domain (BIND) 9 Domain Na…
Ukraine has come under a fresh cyber onslaught from Russia that involved the deployment of a previously undocumented Golang-based data wiper dubbedSwiftSlicer.…
The introduction of cloud computing has significantly changed how online businesses function. Working with data…Compliance Auditing for Data Security Posture M…
Cybersecurity researchers have discovered the real-world identity of the threat actor behindGolden Chickensmalware-as-a-service, who goes by the online persona…
Cybersecurity researchers have uncovered a PlugX sample that employs sneaky methods to infect attached removable USB media devices in order to propagate the ma…
Orcusis a Remote Access Trojan with some distinctive characteristics. The RAT allows attackers to create plugins and offers a robust core feature set that make…
The U.K. National Cyber Security Centre (NCSC) on Thursday warned of spear-phishing attacks mounted by Russian and Iranian state-sponsored actors for informati…
In what's a case of hacking the hackers, the darknet infrastructure associated with the Hive ransomware-as-a-service (RaaS) operation has been seized as part o…
