The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An ongoing campaign is targeting npm developers with hundreds of typosquat versions of their legitimate counterparts in an attempt to trick them into running c…
U.S. and Israeli cybersecurity agencies have published a new advisory attributing an Iranian cyber group to targeting the 2024 Summer Olympics and compromising…
TeamTNT has recently emerged at the forefront of the ever-evolving threat landscape by devising novel exploits assaulting Docker clusters. Their Docker Gatling…
A suspected Russian hybrid espionage and influence operation has been observed delivering a mix of Windows and Android malware to target the Ukrainian military…
Recent news sent shockwaves through the open-source community when Greg Kroah-Hartman, a senior Linux kernel leader, announced his decision to remove several R…
Cybersecurity researchers have disclosed a new malware campaign that leverages a malware loader named PureCrypter to deliver a commodity remote access trojan (…
Open-source projects are renowned for their collaborative nature and widespread adoption, yet more sophisticated supply chain attacks target them than ever. Ch…
China's National Computer Virus Emergency Response Center (CVERC) has doubled down on claims that the threat actor known as Volt Typhoon is a fabrication of th…
Cybersecurity researchers have disclosed a new malware campaign that delivers Hijack Loader artifacts that are signed with legitimate code-signing certificates…
An update that fixes three vulnerabilities is now available.
In the current scenario, web applications are gaining momentum, and businesses and corporations are hosting several services. This increased utilization of web…
Nation-state threat actors backed by Beijing broke into a "handful" of U.S. internet service providers (ISPs) as part of a cyber espionage campaign orchestrate…
Following an investigative report about the authorities potentially deanonymizing users of Onion services, Tor assured…Tor Assured Safety Amidst Deanonymizing …
Cybercriminals have been relentlessly attacking the digital landscape, aiming to exploit vulnerabilities in well-known systems. One such exploit is the recentl…
Android device users in South Korea have emerged as a target of a new mobile malware campaign that delivers a new type of threat dubbed SpyAgent.The malware "t…
Heads up, Firefox users! It’s time to update your devices with the latest Firefox 130…Mozilla Released Firefox 130 With Handy AI Chatbot Feature And Security F…
python-aiohttp would allow unintended access to files over the network.
Cybersecurity researchers are warning about the security risks in the machine learning (ML) software supply chain following the discovery of more than 20 vulne…
A new malware campaign is spoofing Palo Alto Networks' GlobalProtect VPN software to deliver a variant of the WikiLoader (aka WailingCrab) loader by means of a…
Researchers have found a new malware targeting Linux systems for at least two years without…New “sedexp” Linux Malware Remained Undetected For Two Years on Lat…
Cybersecurity researchers have uncovered a novel malware campaign that leverages Google Sheets as a command-and-control (C2) mechanism.The activity, detected b…
Cybersecurity researchers have uncovered a novel malware campaign that leverages Google Sheets as a command-and-control (C2) mechanism.The activity, detected b…
Amidst the rising security threats for the aviation industry, the Federal Aviation Authority (FAA) proposed…FAA Proposed New Cybersecurity Rules Addressing Thr…
An update that fixes one vulnerability is now available.