Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
PCIe traffic has long been treated as trusted by default, with data moving in plaintext between CPUs, memory, and devices under the assumption that anything in…
Austin, TX, USA, 4th December 2025, CyberNewsWireSpyCloud Data Shows Corporate Users 3x More Likely to Be Targeted by Phishing Than by Malware on Latest Hackin…
MGASA-2025-0279 - Updated perl-Data-Entropy packages fix security vulnerability
Fix handling of large metadata Fix: CVE-2025-11568
Cybersecurity researchers have disclosed a new set of vulnerabilities impacting OpenAI's ChatGPT artificial intelligence (AI) chatbot that could be exploited b…
WordPress 6.8.3 Release Security updates included in this release: A data exposure issue where authenticated users could access some restricted content. Indepe…
Microsoft on Tuesday unveiled the expansion of its Sentinel Security Incidents and Event Management solution (SIEM) as a unified agentic platform with the gene…
Waltham, United States, 17th September 2025, CyberNewsWireNew in Syteca Release 7.21: Agentless Access, Sensitive Data Masking, and Smooth Session Playback on …
It's always unnerving when a system service you rely on day-to-day turns out to be a potential gateway for unauthorized access. That's the story with CVE-2025-…
The financially motivated threat actor known as Storm-0501 has been observed refining its tactics to conduct data exfiltration and extortion attacks targeting …
Recently, Cloudflare and Perplexity came at odds recently as the former alleged Perplexity of stealth…Cloudflare Blames Perplexity Of Stealth Data Scraping – P…
Just as triathletes know that peak performance requires more than expensive gear, cybersecurity teams are discovering that AI success depends less on the tools…
Ransomware isn’t just a buzzword—it’s a real, growing threat that can cripple your business in…Ransomware Detection Best Practices: How to Catch Attacks Before…
Cybersecurity researchers have disclosed a now-patched security flaw in LangChain's LangSmith platform that could be exploited to capture sensitive data, inclu…
Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) repository that's capable of harvesting sensitive developer-re…
A novel attack technique named EchoLeak has been characterized as a "zero-click" artificial intelligence (AI) vulnerability that allows bad actors to exfiltrat…
ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. Prior to version 5.22.9, improper escaping of a…
A critical infrastructure entity within Ukraine was targeted by a previously unseen data wiper malware named PathWiper, according to new findings from Cisco Ta…
Vulnerabilities was discovered in MariaDB, a SQL database server compatible with MySQL. CVE-2025-30693
A new malware campaign is distributing a novel Rust-based information stealer dubbed EDDIESTEALER using the popular ClickFix social engineering tactic initiate…
When it comes to managing Linux systems, there's one thing every admin knows: security is a constant battle. Sure, you've set up the basics''firewalls, permiss…
Several ransomware actors are using a malware called Skitnet as part of their post-exploitation efforts to steal sensitive data and establish remote control ov…
mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data. (CVE-2025-31492) References: - https://bugs.mageia.org/show_bug.cgi?id=34216
Government and telecommunications sectors in Southeast Asia have become the target of a "sophisticated" campaign undertaken by a new advanced persistent threat…
