Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The GNOME Project recently rolled out GNOME 48.1 , the first maintenance update for the GNOME 48 ''Bengaluru'' desktop environment series. This update will soo…
A new multi-stage attack has been observed delivering malware families like Agent Tesla variants, Remcos RAT, and XLoader."Attackers increasingly rely on such …
The U.S. government funding for non-profit research giant MITRE to operate and maintain its Common Vulnerabilities and Exposures (CVE) program will expire Wedn…
The recently releasedDebian 12.10 "Bookworm" offers us Linux security admins many updates and improvements we can incorporate into our systems. This version pr…
The threat actor known as Space Pirates has been linked to a malicious campaign targeting Russian information technology (IT) organizations with a previously u…
Open Source Security Foundation (OpenSSF) recently unveiled its Security Baseline initiative to assist Linux security admins and developers in incorporating es…
Cybersecurity researchers have flagged a malicious Python library on the Python Package Index (PyPI) repository that facilitates unauthorized music downloads f…
Cybersecurity researchers are calling attention to an ongoing campaign that's targeting gamers and cryptocurrency investors under the guise of open-source proj…
Recent reports have revealed a sophisticated intrusion campaign conducted by Salt Typhoon, targeting major U.S. telecommunications providers. To safeguard agai…
Linus Torvalds' decision to incorporate the Rust programming language into the Linux kernel has spurred great interest and controversy among the Linux communit…
Freelance software developers are the target of an ongoing campaign that leverages job interview-themed lures to deliver cross-platform malware families known …
The 6.12.15 stable kernel update contains a number of important fixes across the tree. The 6.12.14 stable kernel update contains a number of important fixes ac…
Bing Shi reported a flaw in GnuTLS, a library implementing the TLS and SSL protocols. Inefficient processing of certificates containing numerous names or name …
Microsoft said it has discovered a new variant of a known Apple macOS malware called XCSSET as part of limited attacks in the wild."Its first known variant sin…
Cybersecurity researchers have shed light on a new Golang-based backdoor that uses Telegram as a mechanism for command-and-control (C2) communications.Netskope…
The threat actors behind the RansomHub ransomware-as-a-service (RaaS) scheme have been observed leveraging now-patched security flaws in Microsoft Active Direc…
Threat actors have been observed targeting Internet Information Services (IIS) servers in Asia as part of a search engine optimization (SEO) manipulation campa…
Infrastructure as Code (IaC) has revolutionized how you design, deploy, and manage IT resources. Treating infrastructure configuration as code allows you to au…
A new malware campaign dubbed SparkCat has leveraged a suit of bogus apps on both Apple's and Google's respective app stores to steal victims' mnemonic phrases…
The North Korea-linked nation-state hacking group known as Kimsuky has been observed conducting spear-phishing attacks to deliver an information stealer malwar…
As a Linux security admin, staying ahead of the latest updates is crucial for maintaining a secure environment, and the recent release of Firefox 134 brings a …
The North Korean threat actors behind the Contagious Interview campaign have been observed delivering a collection of Apple macOS malware strains dubbed FERRET…
Brazilian Windows users are the target of a campaign that delivers a banking malware known as Coyote."Once deployed, the Coyote Banking Trojan can carry out va…
A financially motivated threat actor has been linked to an ongoing phishing email campaign that has been ongoing since at least July 2024 specifically targetin…
