The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Threat actors are evolving to target a wide variety of systems and infrastructure, BlackBerry says in a new report. "In addition, attacks against Linux systems…
Security stakeholders have come to realize that the prominent role the browser has in the modern corporate environment requires a re-evaluation of how it is ma…
The move to SaaS and other cloud tools has put an emphasis on Identity & Access Management (IAM). After all, user identity is one of the only barriers standing…
New research has found that it is possible for threat actors to abuse a legitimate feature in GitHub Codespaces to deliver malware to victim systems.GitHub Cod…
''Log4j has been around for 20 years; it's become embedded into nearly every meaningful Java application; and the Log4Shell event led to compromises in everyth…
The threat actors behind theKinsingcryptojacking operation have been spotted exploiting misconfigured and exposed PostgreSQL servers to obtain initial access t…
Cloud services provider Rackspace on Thursday confirmed that the ransomware gang known as Play was responsible for last month's breach.The security incident, w…
A critical security flaw has been disclosed in Amazon Elastic Container Registry (ECR) Public Gallery that could have been potentially exploited to stage a mul…
An update for instack-undercloud is now available for Red Hat OpenStack Platform 13 (Queens). Red Hat Product Security has rated this update as having a securi…
A previously undocumented Go-based malware is targeting Redis servers with the goal of taking control of the infected systems and likely building a botnet netw…
The NixOS 22.11 release also comes with OpenSSL 3, OpenSSH 9.1, PHP 8.1, Perl 5.36, and Python 3.10 by default, support for Linode cloud images, native compila…
Popular password management service LastPass said it's investigating a second security incident that involved attackers accessing some of its customer informat…
A threat actor with a suspected China nexus has been linked to a set of espionage attacks in the Philippines that primarily relies on USB devices as an initial…
In this remote and hybrid work environment characterized by cloud computing and mobility, encryption for Linux endpoints such as laptops and mobile devices has…
A serious security vulnerability existed in the Netlify cloud computing platform that allowed cross-site scripting…Serious Netlify Vulnerability Could Allow XS…
It was found that authenticated users could trigger a fault in Nova, a cloud computing fabric controller, to cause information leak. In addition, this update i…
Red Hat Application Interconnect 1.0 introduces a service network, linking TCP and HTTP services across the hybrid cloud. A service network enables communicati…
Cloud-based code hosting platform GitHub has announced that it will now start sending Dependabot alerts for vulnerable GitHub Actions to help developers fix se…
The rise ofDevOps culturein enterprises has accelerated product delivery timelines. Automation undoubtedly has its advantages. However,containerization and the…
The Russian state-sponsored hacking collective known as APT29 has been attributed to a new phishing campaign that takes advantage of legitimate cloud services …
RHEL 9.0, the latest major release of Red Hat Enterprise Linux , delivers tighter security, as well as improved installation, distribution, and management for …
Less privileged Webmin users (excluding those created by Virtualmin and Cloudmin) can modify arbitrary files with root privileges, and so run commands as root …
The following updated rpms for Oracle Linux Cloud Native Environment 1.1 have been uploaded to the Unbreakable Linux Network:
Containers are considered to be a standard way of deploying these microservices to the cloud. Containers are better than virtual machines in almost all ways ex…