The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A new critical remote code execution (RCE) flaw discovered impacting multiple services related to Microsoft Azure could be exploited by a malicious actor to co…
A new critical remote code execution (RCE) flaw discovered impacting multiple services related to Microsoft Azure could be exploited by a malicious actor to co…
The threat actor behind theBlackRockandERMACAndroid banking trojans has unleashed yet another malware for rent calledHookthat introduces new capabilities to ac…
Cybercriminals are increasingly leveraging malicious LNK files as an initial access method to download and execute payloads such as Bumblebee, IcedID, and Qakb…
The US government's cybersecurity agency CISA is giving federal agencies an early February deadline to patch a critical -- and already exploited -- security vu…
Experts warn of a critical Linux Kernel vulnerability (CVSS score of 10) impacting SMB servers that can lead to remote code execution.
Threat actors have been leveraging polyglot and malicious Java archive files to distribute the StrRAT and Ratty remote access trojans to evade detection by sec…
Technology is advancing at a rapid rate. It seems that the next new development is…The state of software supply chain security heading into 2023 on Latest Hack…
Popular email marketing and newsletter service Mailchimp has disclosed yet another security breach that enabled threat actors to access an internal support and…
The global linux operating system market was valued at 5.33 Billion U.S. dollars in 2021 and is expected to grow to 22.15 Billion U.S. dollars in 2029, at a Co…
SecurityWeek reports that pro-Ukraine hacktivist group GhostSec is having its claims of launching the first-ever ransomware attack against an industrial contro…
The threat actor known asBackdoorDiplomacyhas been linked to a new wave of attacks targeting Iranian government entities between July and late December 2022.Pa…
Security vulnerabilities have been disclosed in Netcomm and TP-Link routers, some of which could be weaponized to achieve remote code execution.The flaws, trac…
A security researcher found a serious prototype pollution vulnerability in Python programming language. Exploiting the…Researcher Finds Class Pollution – A Pro…
Four different Microsoft Azure services have been found vulnerable to server-side request forgery (SSRF) attacks that could be exploited to gain unauthorized a…
Heads up, AnyDesk users! A huge phishing campaign involving over 1300 domains delivers Vidar info…Watch Out For This AnyDesk Phishing Campaign That Delivers Vi…
New research has found that it is possible for threat actors to abuse a legitimate feature in GitHub Codespaces to deliver malware to victim systems.GitHub Cod…
A new privilege escalation vulnerability has been identified in the Linux kernel by researcher Davide Ornaghi. This vulnerability might enable a local attacker…
The pace of software development is accelerating. Devops teams are under more pressure to launch products rapidly, and they are able to do so in part because o…
A threat actor by the nameLolip0phas uploaded three rogue packages to the Python Package Index (PyPI) repository that are designed to drop malware on compromis…
''Log4j has been around for 20 years; it's become embedded into nearly every meaningful Java application; and the Log4Shell event led to compromises in everyth…
The hope? To grease the security skids for internet-connected devices '' and they need all the help they can get.
Azure Linux is a public computing platform developed by Microsoft that businesses can use for tasks like app development, analytics, virtual computing, network…
Unidentified threat actors have deployed a new backdoor that borrows its features from the U.S. Central Intelligence Agency (CIA)'sHivemulti-platformmalware su…