Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A variant of the infamous Dridex banking malware has set its sights on Apple's macOS operating system using a previously undocumented infection method, accordi…
In addition to Fedora 38 now allowing "no-omit-frame-pointer" to enhance profiling/debugging with possible performance costs , this next Fedora Linux release i…
If you're looking for a new operating system that takes security seriously, but doesn't cause major user headaches, Vanilla OS might be just the ticket.
Cloud services provider Rackspace on Thursday confirmed that the ransomware gang known as Play was responsible for last month's breach.The security incident, w…
Researchers have found a new malware campaign active in the wild that abuses legit Google…New Malware Campaign Spreads By Exploiting Google Ads on Latest Hacki…
Heads up, WordPress admins! Researchers have warned users of a new Linux malware that targets…Linux Malware Exploits 30 Vulnerabilities To Target WordPress Web…
Netgear has recently warned users of a serious security vulnerability affecting multiple WiFi router models.…Netgear Patched Serious Vulnerability Affecting Mu…
Users who deployed the nightly builds of PyTorch between Christmas and New Year's Eve likely received a rogue package as part of the installation that siphoned…
The latest breach announced by LastPass is a major cause for concern to security stakeholders. As often occurs, we are at a security limbo – on the one hand, a…
DevOps platform CircleCI on Wednesday urged its customers to rotate all their secrets following an unspecified security incident.The company said an investigat…
Fortinet has warned of a high-severity flaw affecting multiple versions of FortiADC application delivery controller that could lead to the execution of arbitra…
Qualcomm on Tuesdayreleased patchesto address multiple security flaws in its chipsets, some of which could be exploited to cause information disclosure and mem…
Ransomware: contemporary threats, how to prevent them and how the FBI can helpIn April 2021, Dutch supermarkets faced a food shortage. The cause wasn't a droug…
A new Linux malware developed using the shell script compiler (shc) has been observed deploying a cryptocurrency miner on compromised systems."It is presumed t…
Synology has released security updates to address a critical flaw impacting VPN Plus Server that could be exploited to take over affected systems.Tracked asCVE…
Challenges with an enforcement-based approachAn enforcement-based approach to security begins with a security policy backed by security controls, often heavy-h…
If you're interested in penetration testing and digital forensics, you know that Kali Linux is worth a try. And if you're already doing it, chances are good yo…
A new malware campaign has been observed using sensitive information stolen from a bank as a lure in phishing emails to drop a remote access trojan calledBitRA…
Financial and insurance sectors in Europe have been targeted by the Raspberry Robin worm, as the malware continues to evolve its post-exploitation capabilities…
A security researcher found a severe security vulnerability in the Google Home speaker that could…Google Home Speaker Vulnerability Could Allow Eavesdropping o…
The maintainers of the PyTorch package have warned users who have installed the nightly builds of the library between December 25, 2022, and December 30, 2022,…
Here's everything you need to know about the CVE-2021-4034 Polkit privilege escalation vulnerability in the Linux kernel.
PyTorch is one of the most popular and widely-used machine learning toolkits out there. Originally developed and released as an open-source project by Facebook…
API-oriented cyberattacks have wreaked havoc on the corporate world, making every organization concerned about API…Why Traditional AppSec Tools are Ineffective…
