Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The 8220 cryptomining group has expanded in size to encompass as many as 30,000 infected hosts, up from 2,000 hosts globally in mid-2021."8220 Gang is one of t…
A never-before-seen Linux malware has been dubbed a "Swiss Army Knife" for its modular architecture and its capability to install rootkits.This previously unde…
Researchers discovered a malicious campaign against ICS systems to create botnets. This relatively small-scale campaign…This Malicious Campaign Targets ICS Sys…
The botnet behind the largest HTTPS distributed denial-of-service (DDoS) attack in June 2022 has been linked to a spate of attacks aimed at nearly 1,000 Cloudf…
The operators behind the Qakbot malware are transforming their delivery vectors in an attempt to sidestep detection."Most recently, threat actors have transfor…
Believe it or not, you might be using a deprecated Linux command. It's not really your fault. You are either habitual of using those commands or learned them t…
Researchers discovered a severe security vulnerability in the Android Photos app that exposed Amazon access…High-Severity Vulnerability Found In Amazon Photos …
Last month Microsoft issued the first production release of CBL-Mariner 2.0 , its in-house Linux distribution used for powering services from Microsoft Azure t…
Researchers have discovered a new malware in the wild targeting Android users. Identified as “MaliBot,”…New MaliBot Android Banking Trojan Mimics Fake Crypto A…
- lockState: do not print `error:` when exit code is unaffected (#2090926) ---- - fix potential DoS from unprivileged users via the state file (CVE-2022-1348)
Several botnets are now using exploits targeting a critical remote code execution (RCE) vulnerability to infect Linux servers running unpatched Atlassian Confl…
A security researcher has shared two CSP bypass scenarios affecting WordPress websites. Both methods involve…Researcher Discloses A WordPress CSP Bypass Public…
The popular vehicle company General Motors has recently admitted to suffering a cyber attack. Reportedly,…General Motors Confirmed Suffering A Credential Stuff…
This update upgrades Firefox to version 91.9.1 ESR. * Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution (CVE-2022-152…
This update upgrades Firefox to version 91.9.1 ESR. * Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution (CVE-2022-152…
This update upgrades Thunderbird to version 91.9.1. * Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution (CVE-2022-152…
Protect your Linux servers from XorDdos, a botnet scanning the internet for SSH servers with weak passwords, Microsoft warns.
Microsoft has once again alerted users about a new Sysrv botnet variant that targets web…Microsoft Warns About New Sysrv Botnet Variant Attacks Web Servers on …
With IoT, 5G and embedded devices becoming a larger part of everyone's daily lives, security''and more importantly, trust in our technology''is on everyone's m…
Researchers have detected a new variant of the BotenaGo malware attacking DVR devices. This malware…New BotenaGo Malware Variant Executes Stealth Attacks Again…
Heads up Chrome users! Google has just pushed another update to its Chrome browser, once…Latest Google Chrome Update Fixed Another Zero-Day Flaw on Latest Hack…
Heads up, Android users! Another banking malware has attempted to target Android users by impersonating…SharkBot Android Trojan Mimics Legit Apps To Appear On …
Microsoft'sPatch Tuesday updatefor the month of March has been made officially available with 71 fixes spanning across its software products such as Windows, O…
Three high-impact security vulnerabilities have been disclosed inAPC Smart-UPS devicesthat could be abused by remote adversaries as a physical weapon to access…
