The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The infamous eGobbler hacking group that surfaced online earlier this year with massive malvertising campaigns has now been caught running a new campaign explo…
- Update to 2.16.3 - Side channel attack on deterministic ECDSA (CVE-2019-16910) Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.16.3-and-…
The update of apache2 released as DLA-1900-1 contained an incomplete fix for CVE-2019-10092, a limited cross-site scripting issue affecting the mod_proxy error…
The popular video platform Vimeo is now in hot water for breaching users' privacy. Vimeo faces a class-action lawsuit forVimeo Faces Class-Action Lawsuit Over …
Two vulnerabilities were found in the WPA protocol implementation found in wpa_supplication (station) and hostapd (access point). CVE-2019-13377
It was discovered that file-roller, an archive manager for GNOME, does not properly handle the extraction of archives with a single ./../ in a file path. An at…
Lilith of Cisco Talos discovered a buffer overflow flaw in the quota code used by e2fsck from the ext2/ext3/ext4 file system utilities. Running e2fsck on a mal…
The updated packages fix security vulnerabilities: Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulati…
Remember the Simjacker vulnerability?Earlier this month, we reported about a critical unpatched weakness in a wide range of SIM cards, which an unnamed surveil…
Lilith of Cisco Talos discovered a buffer overflow flaw in the quota code used by e2fsck from the ext2/ext3/ext4 file system utilities. Running e2fsck on a mal…
Watch out Windows users!There's a new strain of malware making rounds on the Internet that has already infected thousands of computers worldwide and most likel…
Malware or computer virus can infect your computer in several different ways, but one of the most common methods of its delivery is through malicious file atta…
Heads up Instagram users! Here is another scam preying on your accounts. As discovered by researchers, a new Instagram phishingNew Instagram Phishing Attack Tr…
It was discovered that the Lemonldap::NG web SSO system did not restrict OIDC authorization codes to the relying party. For the stable distribution (buster), t…
Social engineering is the art of exploiting human psychology, rather than technical hacking techniques, to gain access to buildings, systems or data. Learn how…
The existence of malicious apps on the Android Play Store is now becoming the new normal. Though, not desirable. Still,Google Removed Numerous Android Apps Del…
Though Russia still has an undiversified and stagnant economy, it was one of the early countries in the world to realize the value of remotely conducted cyber …
Many organizations regard Endpoint Detection and Response (EDR) as their main protection against breaches. EDR, as a category, emerged in 2012 and was rapidly …
Two widely used Adblocker Google Chrome extensions, posing as the original ' AdBlock and uBlock Origin ' extensions on Chrome Web Store, have been caught stuff…
Phishing attacks do not always involve emails or web links. Sometimes, the attackers also leverage the SMS facility to trickPolice Warn Of Scammers Targeting V…
Ecuador officials have arrested the general manager of IT consulting firm Novaestrat after the personal details of almost the entire population of the Republic…
A cybersecurity researcher recently published details and proof-of-concept for an unpatched zero-day vulnerability in phpMyAdmin'one of the most popular applic…
"Warning ' Making your calendar public will make all events visible to the world, including via Google search. Are you sure?"Remember this security warning? No…
Mistakenly sent a picture to someone via WhatsApp that you shouldn't have?Well, we've all been there, but what's more unfortunate is that the 'Delete for Every…