The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The social media giant X (formerly Twitter), quietly started using users’ posts for training Grok…X Leverages Users’ Posts For Training Its Grok AI on Latest H…
sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages …
The U.S. Department of Justice (DoJ) said it seized two internet domains and searched nearly 1,000 social media accounts that Russian threat actors allegedly u…
Cyber risk is increasing for individuals and organizations, making flexible and robust solutions for identifying spam and malware increasingly critical. Apache…
A new ongoing malware campaign has been observed distributing three different stealers, such as CryptBot, LummaC2, and Rhadamanthys hosted on Content Delivery …
Nation-state actors associated with Russia, North Korea, Iran, and China are experimenting with artificial intelligence (AI) and large language models (LLMs) t…
Nation-state actors associated with Russia, North Korea, Iran, and China are experimenting with artificial intelligence (AI) and large language models (LLMs) t…
The threat actor known as UAC-0099 has been linked to continued attacks aimed at Ukraine, some of which leverage a high-severity flaw in the WinRAR software to…
Threat actors have been observed serving malicious code by utilizing Binance's Smart Chain (BSC) contracts in what has been described as the "next level of bul…
A nation-state activity group originating from China has been linked to cyber attacks on dozens of organizations in Taiwan as part of a suspected espionage cam…
A new "mass-spreading" social engineering campaign is targeting users of the Zimbra Collaboration email server with an aim to collect their login credentials f…
The WordPress security plugin All-in-One Security (AIOS) silently logged users’ sign-in activities and passwords in…AIOS WordPress Plugin Found Logging Passwor…
The North Korean advanced persistent threat (APT) group known as Kimsuky has been observed using a piece of custom malware called RandomQuery as part of a reco…
Mandiant, a cybersecurity enterprise, has released a fresh report revealing a new malware strain, named…Novel Malware Strain, PIPEDREAM, Deployed by Russian-Li…
IBM said this week it will soon roll out an AI-infused, hybrid-cloud oriented version of its z/OS mainframe operating system.
As ChatGPT increasingly becomes popular, appearing more of a threat to human writing capabilities, OpenAI…OpenAI Rolls Out AI-Text Detection Tool Following Cha…
Popular email marketing and newsletter service Mailchimp has disclosed yet another security breach that enabled threat actors to access an internal support and…
Numerous bugs riddled the security of the Chinese-made Yunmai Smart Scale devices. The vulnerabilities specifically…Chaining Yunmai Smart Scale App Vulnerabili…
An advanced persistent threat (APT) group operating with objectives aligned with the Chinese government has been linked to an organized supply chain attack on …
The Linux kernel's stable branch maintainer Greg Kroah-Hartman discusses the current state of the development process, addresses some security concerns raised …
Are you aware of how secure your domain is? In most organizations, there is an assumption that their domains are secure and within a few months, but the truth …
No matter which type of business you are in, whether small, medium, or large, email has become an irrefutable tool for communicating with your employees, partn…
The maintainers of the PHP programming language have issued an update regarding the security incident that came to light late last month , stating that the act…
Google security researcher Andy Nguyen has disclosed long-awaited details of zero-click vulnerabilities in the Linux Bluetooth subsystem that allow nearby, una…