The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A recently patched security flaw in the popular WinRAR archiving software has been exploited as a zero-day since April 2023, new findings from Group-IB reveal.…
Kali Linux 2023.3, the third version of 2023, is now available for download, with nine new tools and internal optimizations. Kali Linux is a Linux distribution…
Multiple significant microcode security issues have been discovered. An information exposure bug known as Downfall ( CVE-2022-40982 ) has been found in some In…
Developers are not the only people who have adopted the agile methodology for their development processes. From 2023-06-15 to 2023-07-11, Permiso Security’s p0…
A Syrian threat actor namedEVLFhas been outed as the creator of malware families CypherRAT and CraxsRAT."These RATs are designed to allow an attacker to remote…
A ransomware campaign by the recently emerged Monti ransomware group is targeting victims with a new Linux variant of its malware. The threat group is the late…
A malicious toolset dubbedSpacecolonis being deployed as part of an ongoing campaign to spread variants of the Scarab ransomware across victim organizations gl…
Using a meager $70 setup makes spoofing any Apple device possible. That’s what the researchers…Researchers Demonstrate Apple Device Spoofing At Def Con 2023 on…
More than a dozen malicious packages have been discovered on the npm package repository since the start of August 2023 with capabilities to deploy an open-sour…
A new remote access trojan “QwixxRAT” has caught the security researchers’ attention while targeting Windows…New QwixxRAT Windows Malware Spreads Through Teleg…
Anew State of SaaS Security Posture Management Reportfrom SaaS cybersecurity providerAppOmniindicates that Cybersecurity, IT, and business leaders alike recogn…
Twenty-one severe vulnerabilities have been found in Chromium, including multiple use after frees and heap buffer overflows, among other security issues. These…
A previously undocumented threat cluster has been linked to a software supply chain attack targeting organizations primarily located in Hong Kong and other reg…
A new variant of anApple macOS malwarecalledXLoaderhas surfaced in the wild, masquerading its malicious features under the guise of an office productivity app …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasaddeda critical security flaw in Adobe ColdFusion to its Known Exploited Vulnerabilities (K…
A high-severity security flaw has been disclosed in the WinRAR utility that could be potentially exploited by a threat actor to achieve remote code execution o…
Linux 6.4 or newer paired with the latest cryptsetup development code has landed support for the OPAL specification for self-encrypting drives.
Happy 30th birthday, Debian! Inspiring generations, you shine as a symbol of open-source ideals, innovation, and community.
Heads up, WinRAR users! It’s time to update your systems with the latest WinRAR version…WinRAR Security Flaw Could Allow Command Execution on Latest Hacking Ne…
Threat actors are leveraging access to malware-infected Windows and macOS machines to deliver a proxy server application and use them as exit nodes to reroute …
Researchers found numerous security vulnerabilities in the ScrutisWeb ATM fleet monitoring software that threatened ATM…ScrutisWeb ATM Software Vulnerabilities…
Researchers detected numerous security vulnerabilities in Ivanti Avalanche EMM, allowing remote code execution attacks from…Multiple Vulnerabilities Found In I…
The threat actors behind the HiatusRAT malware have returned from their hiatus with a new wave of reconnaissance and targeting activity aimed at Taiwan-based o…
A cybersecurity researcher from SUSE, a Linux distribution manufacturer, has made public a serious security flaw in the Mozilla VPN client for Linux.