The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Data security in a modern business environment is considered one of the most critical factors for any company. The digitalization of the world has led to more …
The prolific threat actor known asScattered Spiderhas been observed impersonating newly hired employees in targeted firms as a ploy to blend into normal on-hir…
In today's digital landscape, around60%of corporate data now resides in the cloud, with Amazon S3 standing as the backbone of data storage for many major corpo…
An open-source .NET-based information stealer malware dubbedSapphireStealeris being used by multiple entities to enhance its capabilities and spawn their own b…
"Variants of CL0p were initially only found on Windows systems, but the gang also developed a Linux variant toward the end of 2022, reflecting the diversity of…
The Abyss Locker operation is the latest to develop a Linux encryptor to target VMware's ESXi virtual machines platform in attacks on the enterprise.
Progress Software on Thursdaydiscloseda third vulnerability impacting its MOVEit Transfer application, as the Cl0p cybercrime gang deployed extortion tactics a…
Threat actors are employing a previously undocumented "defense evasion tool" dubbed AuKill that's designed to disable endpoint detection and response (EDR) sof…
Taiwanese PC company MSI (short for Micro-Star International) officially confirmed it was the victim of a cyber attack on its systems.The company said it "prom…
As many as 55 zero-day vulnerabilities were exploited in the wild in 2022, with most of the flaws discovered in software from Microsoft, Google, and Apple.Whil…
Written by Linux security expert and LinuxSecurity.com Founder Dave Wreski.Attacks targeting Linux have surged in recent years due to the mass migration of wor…
One thing is clear. The "business value"of data continues to grow, making it an organization's primary piece of intellectual property.From a cyber risk perspec…
Here are three of the worst breaches, attacker tactics and techniques of 2022, and the security controls that can provide effective, enterprise security protec…
In a first-of-its-kind coordinated action, the U.K. and U.S. governments on Thursday levied sanctions against seven Russian nationals for their affiliation to …
The notorious Russian-speaking cybercriminals grew successful by keeping a low profile. But now they have a target on their backs.
Microsoft on Tuesday disclosed it took steps to implement blocking protections and suspend accounts that were used to publish malicious drivers that were certi…
A politically motivated hacker group tied to a series of espionage and sabotage attacks on Israeli entities in 2021 incorporated a previously undocumented remo…
Ukrainian police authorities have nabbed five members of a gang that's believed to have helped orchestrate attacks against more than 50 companies across Europe…
Though we are recovering from the worst pandemic, cyber threats have shown no sign of downshifting, and cybercriminals are still not short of malicious and adv…
More than a week after Microsoft released aÂone-click mitigation toolÂto mitigate cyberattacks targeting on-premises Exchange servers, the companyÂdisclosedÂth…
The U.S. Department of Justice yesterday announced updates on two separate cases involving cyberattacks'a Swiss hacktivist and a Russian hacker who planned to …
Exim may be the Internet's most popular email server, but the MTA's recent history with security vulnerabilities is concerning to say the least. This past Frid…
Ransomware has become a highly coordinated and pervasive threat, and traditional defenses are increasingly struggling to neutralize it. Today’s ransomware atta…