The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The popular password manager KeePass had a severe security vulnerability exposing users’ master passwords in…KeePass Vulnerability Could Expose Master Password…
Threat actors associated with theCyclops ransomwarehave been observed offering an information stealer malware that's designed to capture sensitive data from in…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Mondayplacedtwo recently disclosed flaws in Zyxel firewalls to its Known Exploited Vulnerab…
In the digital age, our personal and professional lives are more intertwined with the internet…Guarding the Gate: The Role of Firewalls in Cybersecurity on Lat…
Over 55% of security executives report that they have experienced a SaaS security incident in the past two years — ranging from data leaks and data breaches to…
Researchers have noticed a weird backdoor-like behavior with Gigabyte systems that risks devices’ security. The…Researchers Observed Backdoor-Like Behavior In …
Cybersecurity researchers have unearthed a new ongoingMagecart-style web skimmer campaign that's designed to steal personally identifiable information (PII) an…
Kali Linux 2023.2, the second version of 2023, is now available with a pre-built Hyper-V image and thirteen new tools, including the Evilginx framework for ste…
An analysis of the Linux variant of a new ransomware strain called BlackSuit has covered significant similarities with another ransomware family calledRoyal.Tr…
A survey of global cybersecurity leaders through the 2023 Certified CISO Hall of Fame Report commissioned by the EC-Council identified 4 primary areas of grave…
Spanish-speaking users in Latin America have been at the receiving end of a new botnet malware dubbedHorabotsince at least November 2020."Horabot enables the t…
Nitrux 2.8.1, codenamed "sc" for "safer computing," has been released, offering enhanced privacy and security features. While the distribution does not claim t…
Data security is reinventing itself. As new data security posture management solutions come to market, organizations are increasingly recognizing the opportuni…
The popular and one of the most-used WordPress plugins, Jetpack recently addressed a critical security…Jetpack Plugin Patched A Critical Vulnerability Triggeri…
U.S. and South Korean intelligence agencies have issued a new alert warning of North Korean cyber actors' use of social engineering tactics to strike think tan…
A critical flaw in Progress Software's in MOVEit Transfer managed file transfer application has come under widespread exploitation in the wild to take over vul…
An analysis of the "evasive and tenacious" malware known as QBot has revealed that 25% of its command-and-control (C2) servers are merely active for a single d…
A previously unknown advanced persistent threat (APT) is targeting iOS devices as part of a sophisticated and long-running mobile campaign dubbedOperation Tria…
Researchers have discovered a novel attack on the Python Package Index (PyPI) repository that employs compiled Python code to sidestep detection by application…
IT hygieneis a security best practice that ensures that digital assets in an organization's environment are secure and running properly. Good IT hygiene includ…
Several buffer overflow vulnerabilities have been identified in ntfs-3g. With a low attack complexity and a high confidentiality, integrity and availability im…
It was discovered that Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1 incorrectly handled uploading multiple files using one form field (CVE-…
The threat actors behind BlackCat ransomware have come up with an improved variant that prioritizes speed and stealth in an attempt to bypass security guardrai…
Cybersecurity researchers have found "backdoor-like behavior" within Gigabyte systems, which they say enables theUEFI firmwareof the devices to drop a Windows …