The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
In what's a case of hacking the hackers, the darknet infrastructure associated with the Hive ransomware-as-a-service (RaaS) operation has been seized as part o…
Threat actors are evolving to target a wide variety of systems and infrastructure, BlackBerry says in a new report. "In addition, attacks against Linux systems…
The notorious Russian-speaking cybercriminals grew successful by keeping a low profile. But now they have a target on their backs.
At least two federal agencies in the U.S. fell victim to a "widespread cyber campaign" that involved the use of legitimate remote monitoring and management (RM…
Security stakeholders have come to realize that the prominent role the browser has in the modern corporate environment requires a re-evaluation of how it is ma…
After rising and falling since 2021, new Linux malware hit record highs at year-end in 2022, growing by 117% over previous levels.
A North Korean nation-state group notorious for crypto heists has been attributed to a new wave of malicious email attacks as part of a "sprawling" credential …
VMware on Tuesday released software to remediate four security vulnerabilities affectingvRealize Log Insight(aka Aria Operations for Logs) that could expose us…
Organizations in East Asia are being targeted by a likely Chinese-speaking actor dubbed DragonSpark while employing uncommon tactics to go past security layers…
For bad actors, the more intelligence they have on their target, the better. Attackers typically gather intelligence by scraping data readily available from pu…
Suspected Chinese hackers exploited a recently disclosed FortiOS SSL-VPN vulnerability as a zero-day in December, targeting a European government and an Africa…
Node.js is an open source development platform for running JavaScript code on the server side. Node is useful for developing applications that require a persis…
Vulnerability analysis results inOrange Cyberdefenses' Security Navigatorshow that some vulnerabilities first discovered in 1999 are still found in networks to…
The Emotet malware operation has continued to refine its tactics in an effort to fly under the radar, while also acting as a conduit for other dangerous malwar…
Apple has backported fixes for a recently disclosed critical security flaw affecting older devices, citing evidence of active exploitation.The issue, tracked a…
Researchers have devised a novel attack strategy against AI assistants. Dubbed “TrojanPuzzle,” the data poisoning…TROJANPUZZLE Attack Compels AI Assistants To …
Researchers discovered numerous security vulnerabilities in Samsung’s Galaxy App Store application that threatened Samsung users.…Multiple Vulnerabilities Foun…
There's been a shift towards 'memory safe' languages. So, can updates to C++ help it catch up in the eyes of developers?
Linux is undoubtedly the best open-source operating system, and is arguably the most secure OS by design . Most computers these days are Linux-based. Android O…
The move to SaaS and other cloud tools has put an emphasis on Identity & Access Management (IAM). After all, user identity is one of the only barriers standing…
Threat actors associated with the Roaming Mantis attack campaign have been observed delivering an updated variant of their patent mobile malware known as Wroba…
The Russian state-sponsored cyber espionage group known as Gamaredon has continued its digital onslaught against Ukraine, with recent attacks leveraging the po…
Unless your computer is pretty old, it probably uses UEFI (Unified Extensible Firmware Interface) to boot. The idea is that a bootloader picks up files from an…
A suspected China-nexus threat actor exploited a recently patched vulnerability in Fortinet FortiOS SSL-VPN as a zero-day in attacks targeting a European gover…