The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Google researchers recently reported a vulnerability in Intel CPUs leading to a new “Downfall” side-channel…Intel Patched Newly Reported Downfall Attack Affect…
E-commerce sites using Adobe's Magento 2 software are the target of an ongoing campaign that has been active since at least January 2023.The attacks, dubbedXur…
[BLACK HAT] Googlers have lately found not one but two more security vulnerabilities in Intel and AMD processors that can be exploited to steal sensitive data …
The scanning and enumeration phase of penetration tests is vital, so what are the best free tools you can use to create this solid pentest foundation?
Germany's Federal Office for the Protection of the Constitution (BfV) has warned of cyber attacks targeting Iranian persons and organizations in the country si…
Users in Latin America (LATAM) are the target of a financial malware calledJanelaRATthat's capable of capturing sensitive information from compromised Microsof…
A hitherto undocumented threat actor operating for nearly a decade and codenamedMoustachedBouncer has been attributed to cyber espionage attacks aimed at forei…
Google has announced plans to add support for quantum-resistant encryption algorithms in its Chrome browser, starting with version 116."Chrome will begin suppo…
The White House launched a multimillion-dollar cyber contest to use artificial intelligence (AI) to detect and fix security vulnerabilities in the U.S. governm…
Following yesterday's disclosure of the AMD "Inception" security vulnerability and the Linux kernel patches merged for reporting the mitigation status as well …
An unknown threat actor has been linked to a cyber attack on a power generation company in South Africa with a new variant of the SystemBC malware called Droxi…
An unknown threat actor has been linked to a cyber attack on a power generation company in southern Africa with a new variant of the SystemBC malware called Dr…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasaddeda recently patched security flaw in Microsoft's .NET and Visual Studio products to its…
Malicious actors are using a legitimate Rust-based injector calledFreeze[.]rsto deploy a commodity malware called XWorm in victim environments.The novel attack…
A new information malware strain calledStatc Stealerhas been found infecting devices running Microsoft Windows to siphon sensitive personal and payment informa…
About 34% of security vulnerabilities impacting industrial control systems (ICSs) that were reported in the first half of 2023 have no patch or remediation, re…
Microsoft has rolled out the scheduled Patch Tuesday updates for August 2023, ensuring automatic updates…Microsoft Patch Tuesday For August ’23 Addresses 84 Fl…
Researchers have devised a new attack strategy that steals data by recording keyboard stroke sounds.…This Acoustic Attack Analyzes Keystrokes To Steal Data Via…
Video call API and virtual meetings have become the bread and butter of today’s remote…Virtual Meetings Security with Token Authentication on Latest Hacking Ne…
Hackers associated with China's Ministry of State Security (MSS) have been linked to attacks in 17 different countries in Asia, Europe, and North America from …
Validate security continuously across your full stack with Pen Testing as a Service.In today's modern security operations center (SOC), it's a battle between t…
Multiple security issues were discovered in Thunderbird, including a bug in popup notifications delay calculation that could have enabled an attacker to trick …
Eleven severe vulnerabilities have been found in Chromium, including multiple Type Confusion bugs in V8, use-after-frees in Cast, Blink Task Scheduling and Web…
Google has introduced a new security feature in Android 14 that allows IT administrators to disable support for 2G cellular networks in their managed device fl…