The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Sophisticated cyber actors backed by Iran known asOilRighave been linked to a spear-phishing campaign that infects victims with a new strain of malware called …
Threat actors are selling a new crypter and loader calledASMCrypt, which has been described as an "evolved version" of another loader malware known as DoubleFi…
Threat actors are selling a new crypter and loader calledASMCrypt, which has been described as an "evolved version" of another loader malware known as DoubleFi…
Malicious ads served inside Microsoft Bing's artificial intelligence (AI) chatbot are being used to distribute malware when searching for popular tools.The fin…
The landscape of browser security has undergone significant changes over the past decade. While Browser Isolation was once considered the gold standard for pro…
Google has assigned a new CVE identifier for a critical security flaw in the libwebp image library for rendering images in theWebP formatthat has come under ac…
How To Use This ReportEnhance situational awareness of techniques used by threat actorsIdentify potential attacks targeting your industryGain insights to help …
How To Use This ReportEnhance situational awareness of techniques used by threat actorsIdentify potential attacks targeting your industryGain insights to help …
Continuing its efforts for users’ account security, GitHub takes another step as it releases passkey…GitHub Makes Passkey For Passwordless Logins Publicly Avai…
Cybersecurity researchers have discovered a previously undocumented advanced backdoor dubbedDeadglyphemployed by a threat actor known as Stealth Falcon as part…
After serving users with one of the most resilient end-to-end encryption protocols for communication, Signal…Signal Upgrades Its E2E Encryption With Quantum Re…
Security teams are familiar with threats emanating from third-party applications that employees add to improve their productivity. These apps are inherently de…
Cybersecurity researchers have discovered a fresh batch of malicious packages in the npm package registry that are designed to exfiltrate Kubernetes configurat…
GitLab has shipped security patches to resolve a critical flaw that allows an attacker to run pipelines as another user.The issue, tracked asCVE-2023-5009(CVSS…
Cybersecurity company Trend Micro hasreleasedpatches and hotfixes to address a critical security flaw in Apex One and Worry-Free Business Security solutions fo…
This update upgrades Firefox to version 102.15.1 ESR. * libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863) For more details about the security issue(s…
open-vm-tools: SAML token signature bypass (CVE-2023-20900) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, …
This update upgrades Thunderbird to version 102.15.1. * libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863) For more details about the security issue(s…
Targets located in Azerbaijan have been singled out as part of a new campaign that's designed to deploy Rust-based malware on compromised systems.Cybersecurity…
A lot of people might be tempted to dismiss cyber security as something relatively unimportant.…Why is cyber security important for your company? on Latest Hac…
The suspected Pakistan-linked threat actor known asTransparent Tribeis using malicious Android apps mimicking YouTube to distribute the CapraRAT mobile remote …
A buffer overflow was discovered in flac, a library handling Free Lossless Audio Codec media, which could potentially result in the execution of arbitrary code.
Multiple vulnerabilities have been discovered in Binwalk, the worst of which could result in remote code execution.
An arbitrary file overwrite vulnerability has been discovered in RAR and UnRAR, potentially resulting in arbitrary code execution.