The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An Internet Explorer zero-day vulnerability was actively exploited by a North Korean threat actor to target South Korean users by capitalizing on the recentIta…
An Iranian advanced persistent threat (APT) actor known asAgriushas been attributed as behind a set of data wiper attacks aimed at diamond industries in South …
The Vice Society cybercrime group has disproportionately targeted educational institutions, accounting for 33 victims in 2022 and surpassing other ransomware f…
Kali Linux is an open-source, Debian-based distro focusing on penetration testing and security auditing. It consists of various tools, configurations, and auto…
The beta version of the upcoming Linux Mint 21.1 ''Vera'' distribution release is here and it comes with the latest Cinnamon 5.6 desktop environment, so I took…
Cryptocurrency investment companies are the target of a developing threat cluster that uses Telegram groups to seek out potential victims.Microsoft's Security …
Cryptocurrency investment companies are the target of a developing threat cluster that uses Telegram groups to seek out potential victims.Microsoft's Security …
A novel Go-based botnet calledZerobothas been observed in the wild proliferating by taking advantage of nearly two dozen security vulnerabilities in the intern…
A novel Go-based botnet calledZerobothas been observed in the wild proliferating by taking advantage of nearly two dozen security vulnerabilities in the intern…
A malicious campaign targeting the Middle East is likely linked toBackdoorDiplomacy, an advanced persistent threat (APT) group with ties to China.The espionage…
Cybersecurity researchers have shed light on a darknet marketplace calledInTheBoxthat's designed to specifically cater to mobile malware operators.The actor be…
Ransomware attacks keep increasing in volume and impact largely due to organizations' weak security controls. Mid-market companies are targeted as they possess…
A persistent intrusion campaign has set its eyes on telecommunications and business process outsourcing (BPO) companies at lease since June 2022."The end objec…
A version of an open source ransomware toolkit calledCryptonitehas been observed in the wild with wiper capabilities due to its "weak architecture and programm…
Three different security flaws have been disclosed in American Megatrends (AMI) MegaRACBaseboard Management Controller (BMC) software that could lead to remote…
A new data wiper malware calledCryWiperhas been found targeting Russian government agencies, including mayor's offices and courts."Although it disguises itself…
Thanks to the ongoing work led by Intel's Linux engineers, the upcoming Linux 6.2 kernel will feature more feature work around enabling Compress Express Link (…
Hackers are abusing the open-source Linux PRoot utility in BYOF (Bring Your Own Filesystem) attacks to provide a consistent repository of malicious tools that …
Telemetry data is vital for understanding how an IT environment is performing. By gathering this data and monitoring it closely, administrators can identify is…
Qualys researchers demonstrated how to chain a new Linux flaw with two other two issues to gain full root privileges on an impacted system.
In the era of digitization and ever-changing business needs, the production environment has become a living organism. Multiple functions and teams within an or…
Cybersecurity researchers have discovered a security vulnerability that exposes cars from Honda, Nissan, Infiniti, and Acura to remote attacks through a connec…
The Lazarus Group threat actor has been observed leveraging fake cryptocurrency apps as a lure to deliver a previously undocumented version of the AppleJeus ma…
The maintainers of the FreeBSD operating system have released updates to remediate a security vulnerability impacting the ping module that could be potentially…