The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
After the Cambridge Analytica fiasco, Facebook started a thorough investigation and scrutiny of all applications. The goal was to singleFacebook Suspends 'Tens…
In the murky realm of hacking and jacking, cybercriminals are now using a primitive method for attacking users. Reportedly, researchersSimjacker is Being Activ…
It would seem that Facebooks’ Instagram frequently makes it to the news due to its security glitches. Recently, a researcherInstagram Flaw That Could Have Prev…
Cybersecurity researchers have discovered a new computer virus associated with the Stealth Falcon state-sponsored cyber espionage group that abuses a built-in …
A massive data breach has struck Quest Diagnostics and the information of up to 11.9 million patients has potentially been compromised.
Hyper-V has been here for some time. It has been flexing itself to gain a larger market share than thatWhat Does the Future Hold for Hyper-V Data Security? on …
Several security issues were fixed in OpenJDK 27.
Several security issues were fixed in OpenJDK 25.
Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a bypass of access restrictions, information disclosure, XML external…
Binance, the world's largest crypto exchange, has denied claims of a new security breach made by a threat actor using the 'ShinyHunters' handle on a newly emer…
Naomi Diaz reports: New York City-based Weill Cornell Medicine disclosed that patient health information was entered into AI tools and processed using machine …
New upstream release v11
Fix CVE-2026-89407 CVE-2026-89425 CVE-2026-68497 CVE-2026-68498 CVE-2026-83557 CVE-2026-19032 CVE-2026-91777 across aligned packages updated to version 2.18.12
An update that solves 5 vulnerabilities can now be installed.
cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE) standard. A remote attacker who can submit a JSON Web Encryption token to…
Shmulik Cohen and Matan Giladi write: Apiiro research found 2,539 real secrets in 1,994 public GitHub repositories: database passwords, cloud keys, API tokens,…
DigiCert explained that over the summer, an internal business system was "externally accessible when that was not intended," and someone had created an unautho…
Mark Rasch writes: Imagine a company gets hacked and hires a law firm to manage the response. The lawyers coordinate the forensic investigation, determine whic…
Claire E. Castles, Amanda Fitzsimmons, Nathaniel P. Garrett, Rebekah Byers Kcehowski, Mary Alexander Myers, and Alexander H. Southwell of Jones Day write: Depa…
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 …
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in guest-to-host privilege escalation or information disclosure. For th…
SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched. Details of the secur…
Several security issues were fixed in Rack.
Relax-and-Recover could be made to expose sensitive information.