The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Threat actors are employing a previously undocumented "defense evasion tool" dubbed AuKill that's designed to disable endpoint detection and response (EDR) sof…
The popular VPN service Mullvad said it received a data search warrant from the Swedish…Mullvad VPN Received Data Warrant – Had None To Share on Latest Hacking…
The parent firm behind the popular ProtonVPN and ProtonMail has now come up with another…Proton Launches ProtonPass Password Manager With E2E Encryption on Lat…
Researchers observed malicious use of a self-claimed educational tool, “Evil Extractor,” for stealing data. They…Evil Extractor Infostealer Targets Windows In …
After being deprecated for several years, Security Enhanced Linux "SELinux" beginning with the Linux 6.4 kernel can no longer be run-time disabled.
Researchers found active exploitation of the Eval PHP WordPress plugin to deploy backdoors on target…Hackers Abuse Outdated Eval PHP WordPress Plugin To Deploy…
A severe zero-day vulnerability, identified as the “GhostToken” flaw, could allow an adversary to infect…GhostToken Zero-Day Vulnerability Found In Google Clou…
After wreaking havoc with Windows and Linux systems, the LockBit ransomware gang now intends to…Lockbit Ransomware Aims To Target macOS Systems – But May Not B…
Considering a new smart home system or thinking about upgrading your new ones? Here are…7 Security Tips When Setting Up Your Smart Home on Latest Hacking News …
Security researchers have recently discovered that Linux users targeted with malware in the new “Operation DreamJob”Lazarus campaignfor the first time.
Society and governments are struggling to adapt to a world full of cybersecurity threats. Case in point: the EU CRA '' Cyber Resilience Act '' is a proposal by…
Lazarus, the prolific North Korean hacking group behind the cascadingsupply chain attack targeting 3CX, also breached two critical infrastructure organizations…
Cybersecurity researchers have disclosed details of a now-patched zero-day flaw in Google Cloud Platform (GCP) that could have enabled threat actors to conceal…
Several high-impact remotely exploitable vulnerabilities were recently discovered in the popular Chromium free and open-source web browser. These issues could …
The supply chain attack targeting 3CX was the result of a prior supply chain compromise associated with a different company, demonstrating a new level of sophi…
Days after the horrifying cyberattack, more details about the 3CX incident surface online as Mandiant…3CX Cyber Attack: It Was The Aftermath Of Another Supply-…
Cisco and VMware have released security updates to address critical security flaws in their products that could be exploited by malicious actors to execute arb…
A chain of two critical flaws has been disclosed in Alibaba Cloud's ApsaraDB RDS for PostgreSQL and AnalyticDB for PostgreSQL that could be exploited to breach…
Researchers have found new malware targeting web browsers in active campaigns. Identified as the Zaraza…Zaraza Malware Exploits Web Browsers To Steal Stored Pa…
Why is Visibility into OT Environments Crucial?The significance of Operational Technology (OT) for businesses is undeniable as the OT sector flourishes alongsi…
The notorious North Korea-aligned state-sponsored actor known as theLazarus Grouphas been attributed to a new campaign aimed at Linux users.The attacks are par…
Fortra, the company behind Cobalt Strike, shed light on a zero-day remote code execution (RCE) vulnerability in its GoAnywhere MFT tool that has come underacti…
In the short time since their inception, ChatGPT and other generative AI platforms have rightfully gained the reputation of ultimate productivity boosters. How…
This release also ships with the latest Tor Browser 12.0.5 anonymous web browser and Linux kernel 6.1.20 LTS.