The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
python3.12 security update
A serious denial of service (DoS) flaw affected the Cisco NX-OS software that empowers Cisco…High-Severity DoS Flaw Patched In Cisco NX-OS Software on Latest H…
Buffer overflow vulnerabilities have long been one of the biggest headaches in computer security, especially on Linux operating systems that power everything f…
Researchers discovered the active exploitation of a zero-day vulnerability in AVTECH IP cameras by the…Malware Botnet Exploits Vulnerable AVTECH IP Cameras on …
Soon after patching over three dozen vulnerabilities, including a zero-day, in Chrome, Google identifies another…Google Confirmed A Now-Patched Chrome Vulnerab…
Cybersecurity researchers have uncovered a novel malware campaign that leverages Google Sheets as a command-and-control (C2) mechanism.The activity, detected b…
Cybersecurity researchers have uncovered a novel malware campaign that leverages Google Sheets as a command-and-control (C2) mechanism.The activity, detected b…
Threat actors are actively exploiting a now-patched, critical security flaw impacting the Atlassian Confluence Data Center and Confluence Server to conduct ill…
Microsoft’s AI flagship, Copilot Studio, potentially threatened the firm’s internal infrastructure. Specifically, a critical SSRF…Microsoft Copilot Studio Vuln…
WordPress admins should once again update their websites to receive plugin updates, particularly if they…WPML WP Plugin Vulnerability Risked 1M+ WordPress Webs…
WordPress admins using the Litespeed Cache plugin must update their sites with the latest plugin…LiteSpeed Cache Plugin Vulnerability Risked 5+ Million WordPre…
Google Chrome users must rush to update their systems with the latest browser release as…Google Patched A Chrome Zero-Day With Multiple Vulnerabilities on Late…
Researchers discovered a serious vulnerability in the popular communication tool’s special service, Slack AI. An…Slack AI Vulnerability Exposed Data From Priva…
Business users need to update their systems with the latest GitHub Enterprise Server release, as…Critical Auth Bypass Vulnerability Affected GitHub Enterprise …
SonicWall has released security updates to address a critical flaw impacting its firewalls that, if successfully exploited, could grant malicious actors unauth…
SolarWinds has issued patches to address a new security flaw in its Web Help Desk (WHD) software that could allow remote unauthenticated users to gain unauthor…
As many as 15,000 applications using Amazon Web Services' (AWS) Application Load Balancer (ALB) for authentication are potentially susceptible to a configurati…
As many as 15,000 applications using Amazon Web Services' (AWS) Application Load Balancer (ALB) for authentication are potentially susceptible to a configurati…
Researchers warn macOS users about numerous unpatched vulnerabilities in Microsoft apps for the system. Exploiting…Unpatched Vulnerabilities In Microsoft macOS…
Microsoft's recent patch, intended to strengthen Secure Boot defenses, has resulted in an unexpected setback for Linux-Windows dual-boot setups worldwide. User…
tomcat security update
US CISA warns users about possible exploitation of a SolarWinds Web Help Desk vulnerability. Exploiting…CISA Warns Of Active Exploitation Of SolarWinds Web Hel…
Cybersecurity researchers have uncovered a surge in malware infections stemming from malvertising campaigns distributing a loader called FakeBat."These attacks…
Malicious actors are using a cloud attack tool named Xeon Sender to conduct SMS phishing and spam campaigns on a large scale by abusing legitimate services."At…