The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
WordPress 6.9.10 Security Release Security updates included in this release A stored XSS on the Comments administration page, exploitable via pending comments,…
Debra Ahmed reports: An unprotected database linked to India-based AI software development and IT services company Vibetech exposed 13.7 million records contai…
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells …
Microsoft announced today that devices running Windows 11 24H2 Home and Pro editions have reached the end of support and will no longer receive monthly securit…
Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts …
Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives attackers root acces…
Justin Doubleday reports: The Cybersecurity and Infrastructure Security Agency is continuing to offer cyber pay incentives to retain skilled technical staff, b…
Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed Phant…
Cybersecurity researchers have disclosed details of a malicious npm package named "tw-pkgprobe-7731" that masquerades as a security tool targeting developers i…
Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN.Elastic Secur…
Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say Iran's intelligence service …
Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam mes…
Update to 2.1.13. The following security vulnerabilites are fixed in this update: GHSA-fj29-64w6-73h6 CVE-2026-63383 https://github.com/libevent/libevent/secur…
Fixes https://access.redhat.com/security/cve/CVE-2026-81893 Fixes CVE-2026-16768: https://access.redhat.com/security/cve/CVE-2026-16768
A security update for SUSE Linux Kernel addresses 19 vulnerabilities, enhancing system security across affected products including SUSE Linux Enterprise Server…
An update for hauler-2.0.3-1.1 on openSUSE Tumbleweed addresses two security vulnerabilities with moderate ratings, improving the system's security against pot…
A security update for the SUSE Linux Kernel addresses 20 vulnerabilities, including critical fixes for memory handling and validation issues, improving system …
A security update for SUSE Linux Kernel fixes 18 vulnerabilities addressing various issues and bugs, including memory leaks and data handling problems, enhanci…
Vulnerability management has been a staple of security programs since the dawn of the cybersecurity discipline. The symbiotic relationship between vulnerabilit…
Oracle Linux has released security updates for several packages, including libzip and php, addressing vulnerabilities and updating to the latest versions for i…
Oracle Linux 8 has received security updates, addressing several CVEs with new RPM packages including kernel enhancements and fixes for issues affecting stabil…
SUSE Linux Enterprise 12 SP5 has released a crucial security update addressing 13 vulnerabilities. Users are encouraged to install the update using recommended…
SUSE has released an important security update for 389-ds addressing three vulnerabilities, enhancing system security for affected products like openSUSE Leap …
A security update for SUSE Linux Kernel addresses 19 vulnerabilities, enhancing system security across multiple SUSE and openSUSE versions, along with installa…