Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Microsoft on Friday shared guidance to help customers discover indicators of compromise (IoCs) associated with a recently patched Outlook vulnerability.Tracked…
A malicious Python package on the Python Package Index (PyPI) repository has been found to use Unicode as a trick to evade detection and deploy an info-stealin…
Seemingly immune for so long, here's a reminder that MacOS and Linux need to protect themselves against malware, too.
A recent campaign undertaken byEarth Pretaindicates that nation-state groups aligned with China are getting increasingly proficient at bypassing security solut…
Chainguard, the co-creator of Sigstore, has conducted a survey to better understand if and how software supply best practices are utilized by the industry. We …
Companies that established open-source program offices over the last few years now need more C-suite oversight to drive education, awareness, and use of open-s…
A change sent in this Sunday ahead of the Linux 6.3-rc3 release is a late addition adding a throttling mechanism to protect the hypervisor from potentially mal…
In 2022 alone, global cyberattacks increased by 38%, resulting in substantial business loss, including financial and reputational damage. Meanwhile, corporate …
German and South Korean government agencies have warned about cyber attacks mounted by a threat actor tracked asKimsukyusing rogue browser extensions to steal …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released eight Industrial Control Systems (ICS)advisorieson Tuesday, warning of critical f…
The North Korean advanced persistent threat (APT) actor dubbed ScarCruft is using weaponized Microsoft Compiled HTML Help (CHM) files to download additional ma…
After being in development for years, Intel's shadow stack support is set to be merged for the upcoming Linux 6.4 cycle. The shadow stack support is part of In…
TheNuGetrepository is the target of a new "sophisticated and highly-malicious attack" aiming to infect .NET developer systems with cryptocurrency stealer malwa…
The threat group tracked asREF2924has been observed deploying previously unseen malware in its attacks aimed at entities in South and Southeast Asia.The malwar…
The threat group tracked asREF2924has been observed deploying previously unseen malware in its attacks aimed at entities in South and Southeast Asia.The malwar…
In a sudden turn of events, Baphomet, the current administrator of BreachForums, said in an update on March 21, 2023, that the hacking forum has been officiall…
Amid theongoing warbetween Russia and Ukraine, government, agriculture, and transportation organizations located in Donetsk, Lugansk, and Crimea have been atta…
Amid theongoing warbetween Russia and Ukraine, government, agriculture, and transportation organizations located in Donetsk, Lugansk, and Crimea have been atta…
Poorly managed Linux SSH servers are being targeted as part of a new campaign that deploys different variants of a malware called ShellBot."ShellBot, also know…
H0lyGh0st, Magecart, and a slew of state-sponsored hacker groups are diversifying their tactics and shifting their focus to…You.That is, if you're in charge of…
As many as 55 zero-day vulnerabilities were exploited in the wild in 2022, with most of the flaws discovered in software from Microsoft, Google, and Apple.Whil…
Researchers have found another way that potentially risks the security of air-gapped systems. Dubbed as…CASPER Attack Targets Air-Gapped Systems Via Internal S…
A new piece of malware dubbeddotRunpeXis being used to distribute numerous known malware families such asAgent Tesla,Ave Maria,BitRAT,FormBook,LokiBot,NetWire,…
After rolling out the feature to its subscribers, NordVPN has now announced expanding Meshnet accessibility…NordVPN Rolls Out Meshnet For Public, Including Non…
