Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A new malware strain known as BundleBot has been stealthily operating under the radar by taking advantage of.NET single-file deployment techniques, enabling th…
The Chinese cyber espionage actor known asCamaro Dragonhas been observed leveraging a new strain of self-propagating malware that spreads through compromised U…
Cybersecurity researchers have taken the wraps off a previously undocumented ransomware strain calledRorschachthat's both sophisticated and fast."What makes Ro…
Lookout, an endpoint-to-cloud cyber security company, have put together their cyber security predictions for 2022.1—Cloud connectivity and cloud-to-cloud conne…
Cybersecurity researchers are warning of ongoing attacks coordinated by a suspected Chinese-speaking threat actor targeting the Afghanistan government as part …
An Iranian threat actor has unleashed a new cyberespionage campaign against a possible Lebanese target with a backdoor capable of exfiltrating sensitive inform…
Social engineering-driven malware threats continue to be a big threat, but new research details how cybercriminals profit off such schemes to launder hundreds …
ZoneAlarm, an internet security software company owned by Israeli cybersecurity firm Check Point Technologies, has suffered a data breach exposing data of its …
Sean Ler reports: Singapore’s point agency coordinating the delivery of aged care services — the Agency for Integrated Care (AIC) — has been hit by a cyberatta…
Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines have all come forward over the last week to report data b…
Update cargo-semver-checks to 0.51.0, with support for variadic function signatures, and build it with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347,…
Update cargo-semver-checks to 0.51.0, with support for variadic function signatures, and build it with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347,…
Update cargo-semver-checks to 0.51.0, with support for variadic function signatures, and build it with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347,…
Update cargo-semver-checks to 0.51.0, with support for variadic function signatures, and build it with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347,…
Update cargo-semver-checks to 0.51.0, with support for variadic function signatures, and build it with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347,…
Update cargo-semver-checks to 0.51.0, with support for variadic function signatures, and build it with rustls 0.23.46 for RUSTSEC-2026-0346, RUSTSEC-2026-0347,…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli…
A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers' payment data during check…
For about two hours on Monday, the organization diverted ambulances to health systems in Albuquerque and Santa Fe. They were forced to suspend outpatient surge…
An attacker who gained access to Keystone's website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement o…
An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little setup. Sure, the model writes the attacks. But everythi…
A Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in with almost no help, and a security researcher watched it ha…
The dangerous part of a stolen identity isn't always the initial login. It's what an attacker can do with that access next. With AI accelerating reconnaissance…
Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans…
