Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ransomwares New Frontier: Linux Systems Face Intensifying Attacks
For a long time, Linux carried an aura of impenetrable security. It was the backbone of choice for enterprise workloads, revered for its reliability, open-sour…
Breaking Down BERT Ransomware: Lessons for Linux & ESXi Defenders
Ransomware is nothing new to us as Linux admins and infosec folks''it's pretty much part of the modern threat landscape now. But when I say "BERT ransomware," …
BERT Ransomware Takes Aim at Linux Systems
You know how it goes''Linux admins have long prided themselves on running systems that ransomware gangs mostly ignored. Sure, the occasional attack would trick…
Mageia 9: 2025-0184 moderate: golang information leak and handling issues
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-4673. os: inconsiste…
Anatomy of a Linux Ransomware Attack
Ransomware has been making life miserable for IT folks for years now, and you've probably heard plenty about how it hits Windows systems . But Linux? Yeah, tha…
Understanding BlackLock: A New Frontier in Linux RaaS
Since its discovery in March 2024, BlackLock (also known as El Dorado or Eldorado) has quickly established itself as a serious threat within the ransomware-as-…
Trojanized Game Installers Deploy Cryptocurrency Miner in Large-Scale StaryDobry Attack
Users who are on the lookout for popular games were lured into downloading trojanized installers that led to the deployment of a cryptocurrency miner on compro…
Google Releases Chrome Update Mitigating Severe Code Execution Vulns
Google recently issued a crucial Chrome update that those using a version of the browser prior to version 132.0.6834.110 should implement immediately. External…
Don't Delay: Google Releases Chrome Update Addressing Serious Security Vulns
Google recently issued a crucial Chrome update that those using a version of the browser prior to version 132.0.6834.110 should implement immediately. External…
Lessons from Bootkitty: Securing Linux Systems Against UEFI Intrusions
New Linux security threats mark critical junctures that challenge existing policies and test security protocols to their limit. One such milestone was the rece…
What Are the Best Free VPN Options for Linux Users?
Linux is famous for its strong security. Yet, adding a Virtual Private Network (VPN) boosts privacy even more. A VPN encrypts connections and protects data. Th…
New 'Helldown' Ransomware Variant Expands Attacks to VMware and Linux Systems
Cybersecurity researchers have shed light on a Linux variant of a relatively new ransomware strain called Helldown, suggesting that the threat actors are broad…
5 Most Common Malware Techniques in 2024
Tactics, techniques, and procedures (TTPs) form the foundation of modern defense strategies. Unlike indicators of compromise (IOCs), TTPs are more stable, maki…
Emerging Mallox Ransomware Variant Targets Linux Using Kryptina Code
A new variant of the Mallox ransomware, which traditionally targeted Windows systems, has been observed targeting Linux environments. This ransomware strain is…
Unmasking Cicada3301: Examining the Threat of the New Rust-Based Ransomware
Ransomware has long been a severe threat to organizations and admins alike. Recently, cybersecurity researchers discovered a new variant called Cicada3301 , wh…
Mageia 2024-0272: apache Security Advisory Updates
CVE-2024-40898: Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows (cve.mitre.org) SSRF in Apache HTTP Server on Windows with mod_rew…
The Rise of Eldorado: Addressing the New Wave of Ransomware-as-a-Service Threats Targeting Linux Systems
Cybersecurity has always been dynamic, and threats are evolving rapidly. One of the latest entrants into this dangerous arena is Eldorado, a ransomware-as-a-se…
RansomHub Unmasked: Protecting Linux Infrastructure Against High-Stakes Ransomware
RansomHub, a Ransomware-as-a-Service (RaaS) platform, has emerged as a significant threat to organizations around the globe. Targeting Windows, Linux, and ESXi…
New Threat Actor 'Void Arachne' Targets Chinese Users with Malicious VPN Installers
Chinese-speaking users are the target of a never-before-seen threat activity cluster codenamed Void Arachne that employs malicious Windows Installer (MSI) file…
China-Linked ValleyRAT Malware Resurfaces with Advanced Data Theft Tactics
Cybersecurity researchers have uncovered an updated version of malware called ValleyRAT that's being distributed as part of a new campaign."In the latest versi…
Akira Ransomware Gang Targets Linux Servers, Extorts $42 Million
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on Windows systems b…
DarkGate Malware Exploits Recently Patched Microsoft Flaw in Zero-Day Attack
A DarkGate malware campaign observed in mid-January 2024 leveraged a recently patched security flaw in Microsoft Windows as a zero-day using bogus software ins…
DarkGate Malware Exploited Recently Patched Microsoft Flaw in Zero-Day Attack
A DarkGate malware campaign observed in mid-January 2024 leveraged a recently patched security flaw in Microsoft Windows as a zero-day using bogus software ins…
Kasseika Ransomware Using BYOVD Trick to Disarms Security Pre-Encryption
The ransomware group known as Kasseika has become the latest to leverage the Bring Your Own Vulnerable Driver (BYOVD) attack to disarm security-related process…