Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
The Linux Kernel in 2025: Security Enhancements, Emerging Threats & Best Practices
It's no secret: the Linux kernel isn't just the foundation of your favorite open-source operating system''it's the hidden backbone of modern computing. Servers…
New Konfety Malware Variant Evades Detection by Manipulating APKs and Dynamic Code
Cybersecurity researchers have discovered a new, sophisticated variant of a known Android malware referred to as Konfety that leverages the evil twin technique…
Zero-Day Alert: Chrome's V8 Security Flaw Fixed in Emergency Patch
If you're a Linux admin or happen to be neck-deep in infosec, here's something worth your immediate attention: a critical security hole in Google Chrome'' CVE-…
Debian DSA-5955-1 CVE-2025-6554 critical: chromium code execution risk
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is awar…
Optimizing Linux Security in 2025: Key Strategies & Best Practices
Recent years have demonstrated a notable shift in the cybersecurity landscape, with Linux systems increasingly targeted by adversaries. Once considered relativ…
Oracle Linux 10 Is Now Available with Unbreakable Enterprise Kernel 8.1
At long last, Oracle Linux 10 has arrived , and it's not just another checkbox upgrade. Whether you're running on x86_64 or aarch64 platforms, this release aim…
New Chrome Security Vulnerabilities Require Urgent Action
Two new Chrome vulnerabilities have surfaced, and despite how often we hear about Chrome in the news, these bugs are not the kind we can afford to brush off. B…
Microsoft Extends Windows 10 Security Updates for One Year with New Enrollment Options
Microsoft on Tuesday announced that it's extending Windows 10 Extended Security Updates (ESU) for an extra year by letting users either pay a small fee of $30 …
How to Secure Linux Servers in SaaS: Essential Security Guide for 2025
Linux powers over 80% of cloud infrastructure , making it an attractive target for cybercriminals. Your Linux server's security matters more than ever, as data…
BERT Ransomware Takes Aim at Linux Systems
You know how it goes''Linux admins have long prided themselves on running systems that ransomware gangs mostly ignored. Sure, the occasional attack would trick…
Debian: DSA-5935-1 severe: chromium code execution and info leak
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is awar…
Hazy Hawk Exploits DNS Records to Hijack CDC, Corporate Domains for Malware Delivery
A threat actor known as Hazy Hawk has been observed hijacking abandoned cloud resources of high-profile organizations, including Amazon S3 buckets and Microsof…
Learning How to Hack: Why Offensive Security Training Benefits Your Entire Security Team
Organizations across industries are experiencing significant escalations in cyberattacks, particularly targeting critical infrastructure providers and cloud-ba…
Russian Hackers Using ClickFix Fake CAPTCHA to Deploy New LOSTKEYS Malware
The Russia-linked threat actor known as COLDRIVER has been observed distributing a new malware called LOSTKEYS as part of an espionage-focused campaign using C…
The Hidden Risks of Russian-Linked Open-Source Tool easyjson
Open-source tools are the backbone of countless systems, from cloud-native infrastructure to enterprise-level applications. But what happens when a widely used…
CNCF and Synadia Resolve NATS Trademark Dispute
In the world of open-source software, transparency and trust are the bedrock of successful projects''something we admins know all too well. That's why the rece…
20-Year Browser History Privacy Flaw Prompts Chrome 136 Release
Google Chrome 136 is here, and it's not just another version bump''it addresses critical security vulnerabilities, including a long-standing privacy risk tied …
Overcoming SaaS Security Risks with Open-Source Tools
The explosive growth of Software-as-a-Service (SaaS) applications in recent years has ushered in new conveniences''and new risks. For us Linux security admins,…
DPRK Hackers Steal $137M from TRON Users in Single-Day Phishing Attack
Multiple threat activity clusters with ties to North Korea (aka Democratic People's Republic of Korea or DPRK) have been linked to attacks targeting organizati…
Iran-Linked Hackers Target Israel with MURKYTOUR Malware via Fake Job Campaign
The Iran-nexus threat actor known as UNC2428 has been observed delivering a backdoor known as MURKYTOUR as part of a job-themed social engineering campaign aim…
From Third-Party Vendors to U.S. Tariffs: The New Cyber Risks Facing Supply Chains
IntroductionCyber threats targeting supply chains have become a growing concern for businesses across industries. As companies continue to expand their relianc…
SpyNote, BadBazaar, MOONSHINE Malware Target Android and iOS Users via Fake Apps
Cybersecurity researchers have found that threat actors are setting up deceptive websites hosted on newly registered domains to deliver a known Android malware…
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [10 February]
In cybersecurity, the smallest crack can lead to the biggest breaches. A leaked encryption key, an unpatched software bug, or an abandoned cloud storage bucket…
SparkCat Malware Uses OCR to Extract Crypto Wallet Recovery Phrases from Images
A new malware campaign dubbed SparkCat has leveraged a suit of bogus apps on both Apple's and Google's respective app stores to steal victims' mnemonic phrases…