Stay Informed

Cybersecurity News

Home / News

Clear

Quick searches: Linux Windows Microsoft 365 AWS OVH VMware WordPress Fortinet Citrix VPN

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

The Hacker News
The Hacker News Vulnerabilities

Oracle WebLogic Server OS Command Injection Flaw Under Active Attack

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting the Oracle WebLogic Server to the Known Exploited …

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles Vulnerabilities

Kinsing Hacker Group Exploits More Flaws, Expands Cryptojacking Botnet

The Kinsing hacker group, or H2Miner, has been orchestrating illicit cryptocurrency mining campaigns since 2019 and poses a persistent security threat. The gro…

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles Breaches & leaks

New Research Reveals Linux Vulnerability Exploitation Has Doubled

Recently conducted research by Kaspersky indicates an alarming rise in cyberattacks using exploits against Linux systems. Data from Kaspersky Security Network …

Linux

The Hacker News
The Hacker News Vulnerabilities

FlyingYeti Exploits WinRAR Vulnerability to Deliver COOKBOX Malware in Ukraine

Cloudflare on Thursday said it took steps to disrupt a month-long phishing campaign orchestrated by a Russia-aligned threat actor called FlyingYeti targeting U…

The Hacker News
The Hacker News Vulnerabilities

RedTail Crypto-Mining Malware Exploiting Palo Alto Networks Firewall Vulnerability

The threat actors behind the RedTail cryptocurrency mining malware have added a recently disclosed security flaw impacting Palo Alto Networks firewalls to its …

Palo Alto

The Hacker News
The Hacker News Vulnerabilities

Researchers Uncover Active Exploitation of WordPress Plugin Vulnerabilities

Cybersecurity researchers have warned that multiple high-severity security vulnerabilities in WordPress plugins are being actively exploited by threat actors t…

WordPress

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles Breaches & leaks

Critical Security Update for Google Chrome Mitigates Data Loss, Full System Compromise

The release of Google Chrome 124 addresses four vulnerabilities, including a critical security flaw enabling remote attackers to execute arbitrary code, potent…

Linux Chrome

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses
Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses Vulnerabilities

Severe Vulnerability Fixed In Cisco Firepower Management Center

Cisco recently addressed a high-severity vulnerability in its Firepower Management Center software with the latest…Severe Vulnerability Fixed In Cisco Firepowe…

Cisco

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses
Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses Vulnerabilities

WhatsApp Chats Vulnerable To Government Monitoring – Report

WhatsApp engineers share their fears about the app being vulnerable to government monitoring via n…WhatsApp Chats Vulnerable To Government Monitoring – Report …

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses
Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses Vulnerabilities

Google Patched Another Chrome Zero-Day Under Active Attack

Google rolled out another important security update for its Chrome browser as it addressed a…Google Patched Another Chrome Zero-Day Under Active Attack on Late…

Chrome

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses
Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses Vulnerabilities

GitLab XSS Vulnerability Could Allow Account Takeover

GitLab addressed numerous security updates with the latest release. These include a high-severity XSS vulnerability…GitLab XSS Vulnerability Could Allow Accoun…

GitLab

The Hacker News
The Hacker News Vulnerabilities

Researchers Warn of CatDDoS Botnet and DNSBomb DDoS Attack Technique

The threat actors behind the CatDDoS malware botnet have exploited over 80 known security flaws in various software over the past three months to infiltrate vu…

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses
Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses Vulnerabilities

Multiple Vulnerabilities Found In Cacti Network Monitoring Tool

Cacti network monitoring software users need to update their systems to the latest version as…Multiple Vulnerabilities Found In Cacti Network Monitoring Tool o…

The Hacker News
The Hacker News Vulnerabilities

TP-Link Gaming Router Vulnerability Exposes Users to Remote Code Attacks

A maximum-severity security flaw has been disclosed in the TP-Link Archer C5400X gaming router that could lead to remote code execution on susceptible devices …

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles Vulnerabilities

Research Indicates All Linux Vendor Kernels Are Insecure - But There's a Fix!

Recent research sheds light on the security vulnerabilities prevalent in Linux vendor kernels due to flawed engineering processes that backport fixes. It empha…

Linux

The Hacker News
The Hacker News Breaches & leaks

Hackers Created Rogue VMs to Evade Detection in Recent MITRE Cyber Attack

The MITRE Corporation has revealed that the cyber attack targeting the not-for-profit company towards late December 2023 by exploiting zero-day flaws in Ivanti…

VMware Ivanti

The Hacker News
The Hacker News Vulnerabilities

Google Detects 4th Chrome Zero-Day in May Actively Under Attack - Update ASAP

Google on Thursday rolled out fixes to address a high-severity security flaw in its Chrome browser that it said has been exploited in the wild.Assigned the CVE…

Chrome

The Hacker News
The Hacker News Vulnerabilities

Courtroom Software Backdoored to Deliver RustDoor Malware in Supply Chain Attack

Malicious actors have backdoored the installer associated with courtroom video recording software developed by Justice AV Solutions (JAVS) to deliver malware t…

The Hacker News
The Hacker News Vulnerabilities

JAVS Courtroom Recording Software Backdoored - Deploys RustDoor Malware

Malicious actors have backdoored the installer associated with courtroom video recording software developed by Justice AV Solutions (JAVS) to deliver malware t…

The Hacker News
The Hacker News Breaches & leaks

Ransomware Attacks Exploit VMware ESXi Vulnerabilities in Alarming Pattern

Ransomware attacks targeting VMware ESXi infrastructure follow an established pattern regardless of the file-encrypting malware deployed, new findings show."Vi…

VMware

The Hacker News
The Hacker News Vulnerabilities

CISA Warns of Actively Exploited Apache Flink Security Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting Apache Flink, an open-source, unified stream-proce…

Apache

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles Vulnerabilities

Critical Security Update for Google Chrome: Implications & Recommendations

The release of Google Chrome 124 addresses four vulnerabilities, including a critical security flaw that can enable attackers to execute arbitrary code. Over t…

Linux Chrome

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles Vulnerabilities

PostgreSQL Security Vulns Allow for XSS, MFA Bypass

Two critical security vulnerabilities were found in pgAdmin, the open-source administration tool for PostgreSQL . The vulnerabilities assigned CVE-2024-4216 an…

Linux Databases

The Hacker News
The Hacker News Vulnerabilities

GHOSTENGINE Exploits Vulnerable Drivers to Disable EDRs in Cryptojacking Attack

Cybersecurity researchers have discovered a new cryptojacking campaign that employs vulnerable drivers to disable known security solutions (EDRs) and thwart de…