The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
It was discovered that libheif incorrectly handled certain image data. An attacker could possibly use this issue to crash the program, resulting in a denial of…
Browser security is becoming increasingly popular, as organizations understand the need to protect at the point of risk - the browser. Network and endpoint sol…
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fi…
DISGOMOJI malware represents an innovative development in cyber espionage tactics, particularly its refined approach to targeting government agencies in India.…
As cyber threats loom large and data breaches continue to pose increasingly significant risks. Organizations and industries that handle sensitive information a…
2023 was a year of unprecedented cyberattacks. Ransomware crippled businesses, DDoS attacks disrupted critical services, and data breaches exposed millions of …
A previously undocumented cyber espionage-focused threat actor named LilacSquid has been linked to targeted attacks spanning various sectors in the United Stat…
Modern computing depends heavily on networking to enable communication among systems and devices, with Linux as one OS that stands out for its versatility and …
Cybersecurity breaches can be devastating for both individuals and businesses alike. While many people tend to focus on understanding how and why they were tar…
Super Low RPO with Continuous Data Protection:Dial Back to Just Seconds Before an AttackZerto, a Hewlett Packard Enterprise company, can help you detect and re…
Open Source maintainers and developers have been warned about the continued wave of attacks aimed at project maintainers similar to those recently targeting th…
Heap buffer overread/data leakage in ProcXIGetSelectedEvents. (CVE-2024-31080) Heap buffer overread/data leakage in ProcXIPassiveGrabDevice. (CVE-2024-31081) U…
An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image,…
A new security shortcoming discovered in Apple M-series chips could be exploited to extract secret keys used during cryptographic operations.Dubbed GoFetch, th…
As the shift of IT infrastructure to cloud-based solutions celebrates its 10-year anniversary, it becomes clear that traditional on-premises approaches to data…
Integrating the Graph for Understanding Artifact Composition (GUAC) in the open-source security framework has tremendous potential to improve software supply c…
Hubert Kario discovered that GnuTLS, a portable library which implements the Transport Layer Security and Datagram Transport Layer Security protocols, was vuln…
The Midnight Blizzard and Cloudflare-Atlassian cybersecurity incidents raised alarms about the vulnerabilities inherent in major SaaS platforms. These incident…
The dynamic Kubernetes security landscape has given rise to several trends shaping how organizations approach this increasingly critical area. The aim of Kuber…
A new variant of the Agent Tesla malware has been observed delivered via a lure file with the ZPAQ compression format to harvest data from several email client…
SaaS applications make up 70% of total company software usage, and as businesses increase their reliance on SaaS apps, they also increase their reliance on tho…
Google is rolling out an "Independent security review" badge in the Play Store'sData safety sectionfor Android apps that have undergone a Mobile Application Se…
Google is rolling out a new banner to highlight the "Independent security review" badge in the Play Store's Data safety section for Android VPN apps that have …
The browser has become the main work interface in modern enterprises. It’s where employees create and interact with data, and how they access organizational an…