Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Cybersecurity researchers from SafeDep and Veracode detailed a number of malware-laced npm packages that are designed to execute remote code and download addit…
For years, macOS has been more of a bystander in the containerization world''a useful client tool for developers but rarely the platform of choice for running …
AI has been weaving itself into every corner of tech, but when it lands squarely in the realm of ethical hacking and cybersecurity, that's when things get real…
Cybersecurity researchers have flagged a supply chain attack targeting over a dozen packages associated with GlueStack to deliver malware.The malware, introduc…
Cybersecurity researchers have disclosed details of a critical security flaw in the Roundcube webmail software that has gone unnoticed for a decade and could b…
Alright, let's talk about open-source AI models . If you're a Linux admin or developer, and you're already spinning up VMs, writing scripts, or monitoring logs…
Misconfigured Docker API instances have become the target of a new malware campaign that transforms them into a cryptocurrency mining botnet.The attacks, desig…
Cybersecurity researchers have discovered an indirect prompt injection flaw in GitLab's artificial intelligence (AI) assistant Duo that could have allowed atta…
Russian organizations have become the target of a phishing campaign that distributes malware called PureRAT, according to new findings from Kaspersky."The camp…
A threat actor known as Hazy Hawk has been observed hijacking abandoned cloud resources of high-profile organizations, including Amazon S3 buckets and Microsof…
ASUS recently patched a vulnerability in routers enabled with AiCloud that could allow executing unauthorized…ASUS Fixed Critical Auth Bypass Vulnerability In …
In a sneaky new supply-chain attack , threat actors have been discovered exploiting package naming conventions to trick unsuspecting developers into installing…
The U.S. Federal Bureau of Investigation (FBI) formally linked the record-breaking $1.5 billion Bybit hack to North Korean threat actors, as the company's CEO …
Cybersecurity researchers are warning of a new campaign that leverages cracked versions of software as a lure to distribute information stealers like Lumma and…
The China-linked threat actor known as Winnti has been attributed to a new campaign dubbed RevivalStone that targeted Japanese companies in the manufacturing, …
As Linux security admins, we understand the many advantages that open-source software brings . Open-sourcing Large Language Models (LLMs) used in AI developmen…
AI is everywhere now, transforming how businesses operate and how users engage with apps, devices, and services. A lot of applications now have some Artificial…
Waitress has a request processing race condition in HTTP pipelining with an invalid first request. (CVE-2024-49768) Waitress has a denial of service leading to…
It’s hard to think of a technology more impactful than Artificial Intelligence (AI). While it’s been around for a while, it’s only recently broken into the mai…
Supply chains have become increasingly complex and interconnected, leading to new vulnerabilities that businesses cannot…Why Modern Businesses Need Supply Chai…
It's hard to think of a technology more impactful than Artificial Intelligence (AI) . While it's been around for a while, it's only recently broken into the ma…
A Russian-speaking cybercrime gang known as Crazy Evil has been linked to over 10 active social media scams that leverage a wide range of tailored lures to dec…
Over 57 distinct threat actors with ties to China, Iran, North Korea, and Russia have been observed using artificial intelligence (AI) technology powered by Go…
An international law enforcement operation has dismantled the domains associated with various online platforms linked to cybercrime such as Cracked, Nulled, Se…
