The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A previously undocumented Android malware campaign has been observed leveraging money-lending apps to blackmail victims into paying up with personal informatio…
Web applications, often in the form of Software as a Service (SaaS), are now the cornerstone for businesses all over the world. SaaS solutions have revolutioni…
NuGet, PyPi, and npm ecosystems are the target of a new campaign that has resulted in over 144,000 packages being published by unknown threat actors."The packa…
Phishing campaigns involving theQakbot malwareare using Scalable Vector Graphics (SVG) images embedded in HTML email attachments.The new distribution method wa…
Microsoft on Tuesday disclosed it took steps to implement blocking protections and suspend accounts that were used to publish malicious drivers that were certi…
Microsoft launched a preview of new server protection capabilities in its Defender for Business solution back in July. The company announced this week that thi…
In the cloud-native space, where applications are purpose built and delivered to run in the cloud, one technology in particular rises above all others '' Kuber…
While Linux does have a variety of security features to help make it safer, it's not impenetrable, which is why you need open-source tools to secure your Linux…
Tech giant Microsoft released its last set of monthly security updates for 2022 withfixes for 49 vulnerabilitiesacross its software products.Of the 49 bugs, si…
The U.S. National Security Agency (NSA) on Tuesdaysaida threat actor tracked as APT5 has been actively exploiting a zero-day flaw in Citrix Application Deliver…
Apple on Tuesday rolled out security updates to iOS, iPadOS, macOS, tvOS, and Safari web browser to address a new zero-day vulnerability that could result in t…
Google on Tuesday announced the open source availability ofOSV-Scanner, a scanner that aims to offer easy access to vulnerability information about various pro…
Google on Tuesday announced the open source availability ofOSV-Scanner, a scanner that aims to offer easy access to vulnerability information about various pro…
A critical security flaw has been disclosed in Amazon Elastic Container Registry (ECR) Public Gallery that could have been potentially exploited to stage a mul…
Researchers at industrial and IoT cybersecurity firm Claroty have identified a generic method for bypassing the web application firewalls (WAFs) of several maj…
Alexandre Oliva announced today the release and general availability of the GNU Linux-libre 6.1 kernel for those who seek 100% freedom for their GNU/Linux comp…
Cybersecurity researchers have published the inner workings of a new wiper calledAzov Ransomwarethat's deliberately designed to corrupt data and "inflict impec…
An active malware campaign is targeting the Python Package Index (PyPI) and npm repositories for Python and JavaScript with typosquatted and fake modules that …
Fortinet on Monday issued emergency patches for a severe security flaw affecting its FortiOS SSL-VPN product that it said is being actively exploited in the wi…
With 2022 coming to a close, there is no better time to buckle down and prepare to face the security challenges in the year to come. This past year has seen it…
A cryptocurrency mining attack targeting the Linux operating system also involved the use of an open source remote access trojan (RAT) dubbedCHAOS.The threat, …
Security-savvy Linux sysadmins understand that it's best to assume that their systems are breached. Threats targeting Linux systems are becoming increasingly p…
Security-savvy Linux sysadmins understand that it's best to assume that their systems are breached. Threats targeting Linux systems are becoming increasingly p…
Life and work administration could become more complex with Internet of Things (IoT) technology and…Cybersecurity Dangers of App Fatigue — Possible Solutions o…