The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The U.S. Federal Bureau of Investigation (FBI) has disclosed that it's in possession of more than 7,000 decryption keys associated with the LockBit ransomware …
Dell customers need to stay cautious as the vendors admit a data breach impacting their…Dell API Exploitation Led to Breach Affecting 49M Customers on Latest H…
A new security shortcoming discovered in Apple M-series chips could be exploited to extract secret keys used during cryptographic operations.Dubbed GoFetch, th…
Two malicious packages discovered on the npm package registry have been found to leverage GitHub to store Base64-encrypted SSH keys stolen from developer syste…
Cybersecurity researchers have discovered a fresh batch of malicious packages in the npm package registry that are designed to exfiltrate Kubernetes configurat…
Researchers have devised a new attack strategy to exfiltrate sensitive information from target devices without…Hackers Can Extract Cryptographic Keys Via Devic…
Globally, there are roughly 30,000 web-based cyberattacks daily, primarily targeting smaller businesses and smaller websites. To put it into perspective, that …
The notorious Ragnarok ransomware has seemingly shut down its operations. Although the gang didn't appear…Ragnarok Ransomware Released Decryption Keys With No …
Codecov reported a devastating supply-chain attack in April. Yet, after almost a month, the victims…Rapid7 Admit Suffering An Impact Due To Codecov Breach on L…
Cybersecurity company Rapid7 on Thursday revealed that unidentified actors improperly managed to get hold of a small portion of its source code repositories in…
Researchers have found criminal hackers employing a new technique to steal data. This server-side data…Hackers Exploit Telegram API For Server-Side Data Exfilt…
A United States regulator has fined the credit card provider Capital One Financial Corp with $80 million over last year's data breach that exposed the personal…
Continuing the new normal of fixing things after major security breaches, Facebook has once again made it into the news.Facebook Makes Changes To Groups API Fo…
It has been over a month since the cybersecurity firm Imperva suffered a breach, we now have an update. AsImperva Breach Update: Stolen AWS API Key Triggered T…
WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher wh…
The systems impacted by the attack include the MyColaSC platform that citizens use to pay utility bills, report non-emergency issues and access other city serv…
Cybersecurity researchers have flagged a new malware artifact generated using DeepSeek that constructed a novel attack path combining "unrealistic browser-malw…
Cybersecurity researchers have flagged a new malware artifact generated using DeepSeek that constructed a novel attack path combining "unrealistic browser-malw…
A China-based threat actor known for deploying Medusa ransomware has been linked to the weaponization of a combination of zero-day and N-day vulnerabilities to…
With one in three cyber-attacks now involving compromised employee accounts, insurers and regulators are placing far greater emphasis on identity posture when …
Several security issues were fixed in wlc.
Cybersecurity researchers have discovered a malicious package on the Python Package Index (PyPI) that has racked up thousands of downloads for over three years…
Containers are among the many recent inventions of modern computing. They have emerged as the cornerstone of software development and deployment. They isolate …
Researchers have discovered two novel attack methods targeting high-performance Intel CPUs that could be exploited to stage a key recovery attack against the A…