The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Oasis Security has disclosed a weakness in NVIDIA NemoClaw that could let an attacker-controlled webpage take unauthenticated control of the local Ollama insta…
Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead drop resolvers (DDRs) to deliver two previously unreported r…
Vulnerability management has been a staple of security programs since the dawn of the cybersecurity discipline. The symbiotic relationship between vulnerabilit…
Cybersecurity researchers have found that several websites are still actively distributing a malware family known as Weedhack to gamers by masquerading as Mine…
A Linux BPF patch posted on August 21, 2026, expands validation for program replacement across cgroup and Linux Security Module hooks. Version 3 addresses case…
Code merged for the Linux 7.3 development cycle changes the measured boot evidence produced by the Integrity Measurement Architecture, or IMA. The kernel now r…
Big security risks come in small packages. While enterprise security teams focus on policing the proliferation of employees using ChatGPT and Claude for quick …
eBPF security is often summarized in one sentence: Linux loads an eBPF program only after the kernel verifier accepts it under the safety checks the verifier p…
A flaw in Kata Containers weakened container security in some Confidential Containers deployments. It allowed a malicious host operator to make the protected g…
Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boot-time remediation driver to perform arbitrary kernel-…
Cybersecurity researchers have flagged a new malware family that's specifically designed to infect Android-based vehicle head unit firmware developed by DoFun.…
The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account published releases that …
A good ad blocker is one of those browser additions you stop noticing once it’s working. Pages settle down. Autoplay boxes disappear. News sites stop shifting …
Linux security monitoring is useful only when it helps a team explain what happened. Collecting more events does not automatically provide better visibility, e…
During a live academic-network deployment, the Linux traffic-sampling system cut the stream sent to the sensor by 78 to 84 percent. In a separate test, it pres…
Linux kernel fuzzing service syzbot has reported an out-of-bounds array access in print_bpf_insn(), a routine used to turn BPF instructions into readable verif…
This week’s Linux security updates affect cloud hosts, public servers, and services used across entire networks. Ubuntu, Debian, and Rocky Linux released impor…
Adversa AI has disclosed an attack technique that it says can cause xAI's Grok chatbot to send a user's name, approximate location, subscription tier, and the …
Researchers at the University of Massachusetts Amherst have demonstrated an attack that revives expired Visa contactless credit cards for real in-store purchas…
In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who weren’t authorized …
Cybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks (CDNs) convert client-facing HTTP…
A new Android threat codenamed Manic has been observed actively targeting Ukrainian banks, government and identity services, and messaging applications, as wel…
A set of 40 Mozilla Firefox extensions has been found to engage in cryptocurrency wallet theft by masquerading as OKX, Rabby Wallet, TronLink, and other Web3 p…
Adelaide, Australia, 19th August 2026, CyberNewswireAirlock Digital Completes Independent IRAP Assessment at the PROTECTED Level on Latest Hacking News | Cyber…