The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Microsoft is warning of continuing attempts by nation-state adversaries and commodity attackers to take advantage ofsecurity vulnerabilitiesuncovered in the Lo…
A security researcher recently found and disclosed a vulnerability to Uber for which the corporate…Serious Vulnerability Allows Phishing Emails to Be Sent From…
Intel is bringing a feature upgrade to Linux that will make Windows users jealous. "The upcoming ''pfr_update'' driver is set to be introduced in Linux kerne l…
Numerous vulnerabilities in the encryption software ‘ENC DataVault’ indirectly impacted the security of storage devices.…Vulnerabilities In ENC DataVault Softw…
Running PHP on a Linux web server is a prerequisite for the use of many popular applications such as Wordpress, Joomla and Drupal. Linux administrators and web…
Following the “Log4Shell” mayhem, Apache has released multiple updates to its Log4j library addressing the…Apache Releases Log4j 2.17.1 Fixing Another Code Exe…
Security researchers found numerous backdoors in Auerswald VoIP appliances risking users’ security. The vendors patched…Researchers Caught Multiple Backdoors I…
Researchers have found new campaigns distributing Formbook malware in the wild with evasive techniques. While…New Formbook Malware Targets Unpatched Windows Sy…
Researchers from Cisco Talos have elaborated on the security vulnerability they discovered in Garret metal…Vulnerabilities In Garrett Walk-Through Metal Detect…
It's been nearly two years in the making since Intel posted FGKASLR patches for improving Linux kernel security. While that work on Finer Grained / Function Gr…
The Apache Software Foundation (ASF) on Tuesday rolled out fresh patches to contain an arbitrary code execution flaw in Log4j that could be abused by threat ac…
Cybersecurity agencies from Australia, Canada, New Zealand, the U.K., and the U.S. on Wednesday released a joint advisory in response to widespread exploitatio…
A short-lived phishing campaign has been observed taking advantage of a novel exploit that bypassed a patch put in place by Microsoft to fix a remote code exec…
The popular software editor DaVinci Resolve had some serious security vulnerabilities leading to code execution.…Code Execution Vulnerabilities Fixed In DaVinc…
The Cupertino giant has addressed a severe Gatekeeper bypass vulnerability affecting macOS devices. Exploiting the…Apple Patched a macOS Gatekeeper Bypass Vuln…
The newly discovered BLISTER malware loader leverages valid code signing certificates to evade detection. Consequently,…New BLISTER Malware Loader Exploits Val…
As Log4j vulnerability continues to haunt the internet world, more bug scanners have surfaced online…US CISA, CrowdStrike Release Free Log4j Scanners on Latest…
A new addition to the ransomware gang has surfaced online targeting systems with a distinct…New AvosLocker Ransomware Exploits AnyDesk, Reboots System In Safe …
A security researcher discovered a serious subdomain takeover vulnerability in the WordPress hosting platform Flywheel.…Subdomain Takeover Flaw Affected Flywhe…
A researcher from Google Project Zero Team discovered a site isolation bypass vulnerability affecting the…Researcher Discovered Site Isolation Bypass In Google…
Apple recently fixed a security vulnerability in the macOS operating system that could be potentially exploited by a threat actor to "trivially and reliably" b…
Threat actors now exploit the critical Apache Log4j vulnerability named Log4Shell to infect vulnerable devices with the notorious Dridex banking trojan or Mete…
Researchers have discovered at least four different vulnerabilities in the Microsoft Teams link preview feature.…Multiple Vulnerabilities Found In Microsoft Te…
Microsoft said it won't be fixing or is pushing patches to a later date for three of the four security flaws uncovered in its Teams business communication plat…