The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An unnamed government entity associated with the United Arab Emirates (U.A.E.) was targeted by a likely Iranian threat actor to breach the victim's Microsoft E…
US CISA recently issued an alert, warning Samsung users about an ASLR bypass flaw being…Samsung ASLR Bypass Flaw Is Actively Exploited – Warns CISA on Latest H…
Several important security issues have been found in the Linux kernel, including a slab-out-of-bound read problem (CVE-2023-1380), a heap out-of-bounds read/wr…
Two important ReDoS issues have been found in the Ruby programming language; one in the URI component (CVE-2023-28755) and one in the Time component (CVE-2023-…
A lot goes into ensuring safety while in the online space. One significant step is…How Cybersecurity Reporting Tools Can Help Enhance Your Incident Response Ca…
In today's digital landscape, browser security has become an increasingly pressing issue, making it essential for organizations to be aware of the latest threa…
The threat actors behind the nascentBuhtiransomware have eschewed their custom payload in favor of leaked LockBit and Babuk ransomware families to strike Windo…
It’s so nice to be able to travel once in a while, especially if you’ve…Be Cyber-Vigilant on Your Cruise with These Cyber Security Tips on Latest Hacking News …
The Iranian threat actor known asAgriusis leveraging a new ransomware strain called Moneybird in its attacks targeting Israeli organizations.Agrius, also known…
Fedora Onyx is now approved to be an official Fedora variant. A Budgie desktop user? You will love this!
If you're involved in securing the applications your organization develops, there is no question that Static Application Security Testing (SAST) solutions are …
Google has removed a screen recording app named "iRecorder - Screen Recorder" from the Play Store after it was found to sneak in information stealing capabilit…
An updated version of the commodity malware called Legion comes with expanded features to compromise SSH servers and Amazon Web Services (AWS) credentials asso…
The infamous Lazarus Group actor has been targeting vulnerable versions of Microsoft Internet Information Services (IIS) servers as an initial breach route to …
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of cyber attacks targeting state bodies in the country as part of an espionage campaign.Th…
The North Korean advanced persistent threat (APT) group known as Kimsuky has been observed using a piece of custom malware called RandomQuery as part of a reco…
An unknown threat actor has been observed leveraging a malicious Windows kernel driver in attacks likely targeting the Middle East since at least May 2020.Fort…
SQLite 3.42 is now available as the newest update to this widely-used, embed-friendly SQL database option that is used by countless applications and other soft…
AWS is open sourcing its Cedar policy language and authorization engine and Snapchange, an open source snapshot-based fuzzing tool.
Declassified documents reveal that the FBI improperly utilized a contentious surveillance method, known as Section…FBI Misuse of Surveillance Tool on Jan. 6 Pr…
China has banned U.S. chip maker Micron from selling its products to Chinese companies working on key infrastructure projects, citing national security risks.T…
New findings about a hacker group linked to cyber attacks targeting companies in the Russo-Ukrainian conflict area reveal that it may have been around for much…
Discover the power of Impacket, an incredibly versatile collection of Python classes for working with…Impacket Cheatsheet For Penetration Testers on Latest Hac…
Several important security issues were identified in the runC Open Container Project. It was discovered that runC incorrectly performed access control when mou…