Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Optimizing Linux Security 2026: Key Strategies for Modern Threats
Recent years have demonstrated a notable shift in the cybersecurity landscape, with Linux systems increasingly targeted by adversaries. Once considered relativ…
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More
This week saw a lot of new cyber trouble. Hackers hit Fortinet and Chrome with new 0-day bugs. They also broke into supply chains and SaaS tools. Many hid insi…
Iranian Hackers Use DEEPROOT and TWOSTROKE Malware in Aerospace and Defense Attacks
Suspected espionage-driven threat actors from Iran have been observed deploying backdoors like TWOSTROKE and DEEPROOT as part of continued attacks aimed at aer…
Microsoft Mitigates Record 5.72 Tbps DDoS Attack Driven by AISURU Botnet
Microsoft on Monday disclosed that it automatically detected and neutralized a distributed denial-of-service (DDoS) attack targeting a single endpoint in Austr…
Microsoft Mitigates Record 15.72 Tbps DDoS Attack Driven by AISURU Botnet
Microsoft on Monday disclosed that it automatically detected and neutralized a distributed denial-of-service (DDoS) attack targeting a single endpoint in Austr…
Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT
The threat actor known as Dragon Breath has been observed making use of a multi-stage loader codenamed RONINGLOADER to deliver a modified variant of a remote a…
Active Directory Under Siege: Why Critical Infrastructure Needs Stronger Security
Active Directory remains the authentication backbone for over 90% of Fortune 1000 companies. AD's importance has grown as companies adopt hybrid and cloud infr…
SonicWall: Firewall Management and Security Lessons After Breach
SonicWall confirmed a breach in its cloud backup system that exposed customer configuration files. It's the kind of incident that looks small until you see wha…
Effective Digital Risk Protection Strategies for Ensuring Linux Security
Security never stays still. Every new vendor connection, cloud integration, or endpoint expands the surface attackers can reach. Phishing kits evolve, fake dom…
North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts
A threat actor with ties to the Democratic People's Republic of Korea (aka North Korea) has been observed leveraging the EtherHiding technique to distribute ma…
ThreatsDay Bulletin: MS Teams Hack, MFA Hijacking, $2B Crypto Heist, Apple Siri Probe & More
Cyber threats are evolving faster than ever. Attackers now combine social engineering, AI-driven manipulation, and cloud exploitation to breach targets once co…
Ubuntu: Kernel Critical Updates Network DoS Vulnerabilities 2025:0011-1
Canonical has released a coordinated set of Ubuntu kernel advisories, including USN-7789-2, USN-7792-3, USN-7809-1, USN-7810-1, and USN-7811-1. Each update add…
5 Critical Questions For Adopting an AI Security Solution
In the era of rapidly advancing artificial intelligence (AI) and cloud technologies, organizations are increasingly implementing security measures to protect s…
Debian: DSA-6004-1: chromium
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is awar…
Debian: DSA-6004-1 Chromium Critical Arbitrary Code Exec Threat
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is awar…
Everything You Need to Know About Linux Proxy Servers (2025 Guide)
A linux proxy server has been around for years, but in 2025, it's become baseline infrastructure. Privacy demands are higher, compliance rules are stricter, an…
Phoenix RowHammer Attack Bypasses Advanced DDR5 Memory Protections in 109 Seconds
A team of academics from ETH Zürich and Google has discovered a new variant of a RowHammer attack targeting Double Data Rate 5 (DDR5) memory chips from South K…
What Is A Virtual Private Network (VPN)?
If you're managing a Linux environment, on-prem or in the cloud, chances are you've already tangled with questions of network security: firewalls, SSH hardenin…
Critical Linux Kernel Bug Grants Attackers Full Kernel-Level Control from Chrome Sandbox
Let's talk about CVE-2025-38236 . If you've been following the Linux kernel's security track record, you already know how hard developers work to keep it solid…
Soco404: Linux Cryptomining Campaign Masquerades as 404 Error Pages
Let's talk about something that's been slipping under the radar: Soco404 . If you manage Linux systems in any capacity''or just spend time keeping production e…
Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure
The notorious cybercrime group known as Scattered Spider is targeting VMware ESXi hypervisors in attacks targeting retail, airline, and transportation sectors …
CastleLoader Malware Infects 469 Devices Using Fake GitHub Repos and ClickFix Phishing
Cybersecurity researchers have shed light on a new versatile malware loader called CastleLoader that has been put to use in campaigns distributing various info…
Breaking Down CVE-2025-6558: Chromes Latest Actively Exploited 0-Day
Let's talk about CVE-2025-6558 ''the latest zero-day vulnerability in Google Chrome. If you're managing Linux systems or handling infosec at any level, you sho…
Debian: Chromium Important RCE and DoS Issue DSA-5963-1 CVE-2025-6558
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is awar…