The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Three high-impact security vulnerabilities have been disclosed inAPC Smart-UPS devicesthat could be abused by remote adversaries as a physical weapon to access…
Three high-impact security vulnerabilities have been disclosed inAPC Smart-UPS devicesthat could be abused by remote adversaries as a physical weapon to access…
Newly discovered vulnerability “Dirty Pipe” vulnerability most Linux distros, giving root access to the attacker…Linux Dirty Pipe Exploit Gives Root Access – P…
As many as seven security vulnerabilities have been disclosed in PTC's Axeda software that could be weaponized to gain unauthorized access to medical and IoT d…
An Android banking trojan designed to steal credentials and SMS messages has been observed once again sneaking past Google Play Store protections to target use…
TrickBot, the infamous Windows crimeware-as-a-service (CaaS) solution that's used by a variety of threat actors to deliver next-stage payloads like ransomware,…
While VirusTotal is a useful platform to check malicious files, it can be a security…Researchers Demonstrate VirusTotal Hacking Attack To Steal Credentials on …
Researchers have discovered a severe bug in the Safari 15 browser that potentially leaks a…Safari 15 Browser Vulnerability Potentially Exposes User Data – Appl…
A threat actor with potential links to an Indian cybersecurity company has been nothing if remarkably persistent in its attacks against military organizations …
Cybersecurity researchers have proposed a novel approachthat harnesses electromagnetic field emanations from the Internet of Things (IoT) devices as a side-cha…
A dependency used to extract docker/OCI image layers can be tricked into modifying host files by creating a malicious layer that has a symlink with the name ".…
After the disastrous Log4j vulnerability disrupted the online world, another vulnerability surfaced online. It turns…Another Apache Log4j Bug Discovered – Patc…
Mozilla is beginning to roll out Firefox 95 with a new sandboxing technology called RLBox that prevents untrusted code and other security vulnerabilities from …
Rocky Linux 8.5 is now out with Secure Boot support and updated components. The enterprise OS is yet another free and open-source CentOS alternative based on R…
Months after researchers detailed Braktooth bugs, they now have released the PoC exploit to the…US CISA Pushes Vendors For BrakTooth Patches After PoC Goes Pub…
A critical Linux kernel bug (CVE-2021-43267) exists in a TIPC message type that allows Linux nodes to send cryptographic keys to each other, and could allow re…
Cybersecurity researchers disclosed details of what they say is the "largest botnet" observed in the wild in the last six years, infecting over 1.6 million dev…
Despite security measures in place, researchers have found how to analyze and exploit Bluetooth transmissions…Tracking Mobile Devices by Analyzing Bluetooth Tr…
Oracle has published its latest quarterly update to GraalVM, the open-source Java JVM/JDK implemented in Java that also supports other execution modes and prog…
Commercially developed FinFisher surveillanceware has been upgraded to infect Windows devices using aÂUEFIÂ(Unified Extensible Firmware Interface) bootkit that…
While Apple has already deprecated the insecure TLS 1.0 and 1.1 protocols in the latest…Apple To Remove Insecure TLS Protocols In Future macOS, iOS Releases on…
Recently, Google has released another major update for Chrome users. The new update addresses a…Google Chrome Patched Another Zero-Day Bug Within A Month on La…
A researcher found critical security vulnerabilities in the Motorola Halo+ baby monitor. Exploiting this flaw…Serious RCE Vulnerabilities Found In Motorola Hal…
Rebuild for dovecot 2.3.16 ---- Rebuild for dovecot 2.3.16