The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Client-side TLS so that it verifies that the server hostname matches its certificate (Fixed in fossil 2.14.2). A data exfiltration bug in the server (Fixed in …
Due to a data race in the crossbeam-deque in the crossbeam crate, one or more tasks in the worker queue could have been be popped twice instead of other tasks …
The U.S. government on Wednesday announced the formation of a new Civil Cyber-Fraud Initiative that aims to hold contractors accountable for failing to meet re…
A previously undocumented threat actor has been identified as behind a string of attacks targeting fuel, energy, and aviation production industries in Russia, …
A newly discovered side-channel attack demonstrated on modern processors can be weaponized to successfully overcomeÂSite Isolation protectionsÂweaved into Goog…
The operators behind the REvil ransomware-as-a-service (RaaS)ÂstagedÂa surprise return after a two-month hiatus following the widely publicized attack on techn…
Microsoft's Active Directory isÂsaid to be used by 95%Âof Fortune 500. As a result, it is a prime target for attackers as they look to gain access to credentia…
Due to privacy blunders in Microsoft Power Apps, many firms from different sectors leaked data…Misconfigurations in Microsoft Power Apps Leaked Millions Of Rec…
The U.S. is presently combating two pandemics--coronavirus and ransomware attacks. Both have partially shut down parts of the economy. However, in the case of …
A new Android trojan has been found to compromise Facebook accounts of over 10,000 users in at least 144 countries since March 2021 via fraudulent apps distrib…
Thorsten Glaser and Axel Beckert reported that lynx, a non-graphical (text-mode) web browser, does not properly handle the userinfo subcomponent of a URI, whic…
Given the increasing number of ransomware attacks and security breaches targeting business networks, researchers have…Hopper ' The Security Tool That Protects …
Nearly three weeks after Florida-based software vendor Kaseya was hit by aÂwidespread supply-chain ransomware attack, the company on Thursday said it obtained …
A malware known for targeting macOS operating system has been updated once again to add more features to its toolset that allows it to amass and exfiltrate sen…
REvil, the infamous ransomware cartel behind some of the biggest cyberattacks targeting JBS and Kaseya, has mysteriously disappeared from the dark web, leading…
Mozilla Firefox 90 is now available to Linux users for download, removing built-in FTP (File Transfer Protocol) support, and introducing support for Fetch Meta…
The recent tsunami of ransomware has brought to life the fears of downtime and data loss cybersecurity pros have warned about, as attacks on the energy sector,…
OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authe…
A cyber-physical attack is an example of a security breach in cyberspace that impacts the…Tips to Improve Cybersecurity Amidst Cyber Physical Attack on Latest …
Learn 13 Linux security best practices you can follow to avoid privacy risks and data leaks.
It seems like every new day brings with it a new ransomware news item ' new attacks, methods, horror stories, and data being leaked.Ransomware attacks are on t…
An emerging ransomware strain in the threat landscape claims to have breached 30 organizations in just four months since it went operational by riding on the c…
Thank you to Oyelakin Timilehin Valentina and Duane Dunston for contributing this article.Threat intelligence (or threat intell) is information used to underst…
Days afterÂMicrosoft,ÂSecureworks, andÂVolexityÂshed light on a new spear-phishing activity unleashed by the Russian hackers who breached SolarWinds IT managem…