The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
While IT security managers in companies and public administrations rely on the concept of Zero Trust, APTS (Advanced Persistent Threats) are putting its practi…
Google has announced plans to add a new feature in the upcoming version of its Chrome web browser to proactively alert users when an extension they have instal…
Update to upstream 9.2.2. Changes with Apache Traffic Server 9.2.2 #9544 - Docs: format typos in header_rewrite doc #9754 - Fix OCSP detection during build (9.…
A previously undetected attack method calledNoFilterhas been found to abuse the Windows Filtering Platform (WFP) to achieve privilege escalation in the Windows…
It was discovered that OpenSSH incorrectly handled loading certain PKCS#11 providers. If a user forwarded their ssh-agent to an untrusted system, a remote atta…
The threat actors behind the Monti ransomware have resurfaced after a two-month break with a new Linux version of the encryptor in its attacks targeting govern…
The just-released BlackBerry Global Threat Intelligence Report reveals a 40% increase in cyberattacks against government and public service organizations versu…
The npm package registry has emerged as the target of yet another highly targeted attack campaign that aims to entice developers into downloading malevolent mo…
Germany's Federal Office for the Protection of the Constitution (BfV) has warned of cyber attacks targeting Iranian persons and organizations in the country si…
SoX is a command line utility that can convert various formats of computer audio files in to other formats. It can also apply various effects to these sound fi…
Multiple vulnerabilities were discovered in the RealMedia demuxers for the GStreamer media framework, which may result in denial of service or potentially the …
About 34% of security vulnerabilities impacting industrial control systems (ICSs) that were reported in the first half of 2023 have no patch or remediation, re…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, bypass of the s…
Video call API and virtual meetings have become the bread and butter of today’s remote…Virtual Meetings Security with Token Authentication on Latest Hacking Ne…
Hackers associated with China's Ministry of State Security (MSS) have been linked to attacks in 17 different countries in Asia, Europe, and North America from …
Validate security continuously across your full stack with Pen Testing as a Service.In today's modern security operations center (SOC), it's a battle between t…
Multiple security issues were discovered in Thunderbird, including a bug in popup notifications delay calculation that could have enabled an attacker to trick …
Microsoft has patched a total of74 flawsin its software as part of the company's Patch Tuesday updates for August 2023, down from the voluminous 132 vulnerabil…
Tactical similarities have been unearthed between the double extortion ransomware group known as Rhysida and Vice Society, including in their targeting of educ…
An unknown threat actor is using a variant of the Yashma ransomware to target various entities in English-speaking countries, Bulgaria, China, and Vietnam at l…
Scaling a software application successfully is no small feat. Like raising a child, it requires planning, having the right foundations, and being prepared to a…
Cybersecurity researchers have discovered a new high-severity security flaw in PaperCut print management software for Windows that could result in remote code …
Two critical remote code execution (RCE) vulnerabilities have been found in OpenSSH (CVE-2023-28531 and CVE-2023-38408). Because these bugs are simple to explo…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, bypass of the s…