The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A prolific North Korean state-sponsored hacking group has been tied to a new ongoing espionage campaign aimed at exfiltrating sensitive information from organi…
The US government on Monday formally charged six Russian intelligence officers for carrying out destructive malware attacks with an aim to disrupt and destabil…
Once again, the prominent Five Eyes Alliance has asked for meddling, potentially compromising the robustness of end-to-end encryption. This time,Five Eyes Alli…
Managed Security Services Providers (MSSPs) have it rough. They have the burden of protecting their client organizations from cyberattacks, with clients from d…
A team of five security researchers analyzed several Apple online services for three months and found as many as 55 vulnerabilities, 11 of which are critical i…
**PHP version 7.3.23** (01 Oct 2020) **Core:** * Fixed bug php#80048 (Bug php#69100 has not been fixed for Windows). (cmb) * Fixed bug php#80049 (Memleak when …
Cybersecurity researchers today disclosed details of security vulnerabilities found in popular antivirus solutions that could enable attackers to elevate their…
Another ransomware attack surfaces online. The victim belongs to the health sector, thus affecting the patients. Reportedly, several hospitals inUHS Hospital N…
Another crypto exchange has suffered a loss of millions of dollars following a cyber attack. As reported, the latest victimKuCoin Cryptocurrency Exchange Hacke…
A back-end server associated with Microsoft Bing exposed sensitive data of the search engine's mobile application users, including search queries, device detai…
German authorities last weekÂdisclosedÂthat a ransomware attack on the University Hospital of DàŒsseldorf (UKD) caused a failure of IT systems, resulting in th…
Over the next couple of weeks and months, LinuxSecurity editors and contributors will be writing a series on Linux Web Server Security. This week, we're summar…
Update: K-Electric website is now working fine. They have also issued a pop-up notice on their website confirming that allPakistan's Power Utility K-Electric S…
PuTTY 0.68 through 0.73 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to t…
Are your Linux servers secure? No machine connected to the internet is 100% secure, of course. In the words of security guru Bruce Schneier: “Security is a pro…
Encrypted-messaging app Telegram suffered a massive data leak that exposed the personal data of millions of users. A rival toTelegram Data Leak Exposes Million…
Are your Linux servers secure? No machine connected to the internet is 100% secure, of course. In the words of security guru Bruce Schneier: ''Security is a pr…
Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Connectors. Successful attacks require human i…
The American bank holding firm Capital One has faced a huge fine for failing to protect users' security. Specifically, theCapital One Fined $80 Million After O…
Intelligence agencies in the US have released information about a new variant of 12-year-old computer virus used by China's state-sponsored hackers targeting g…
chromium-browser: Use after free in ANGLE (CVE-2020-6463) * chromium-browser: Inappropriate implementation in WebRTC (CVE-2020-6514) * Mozilla: Potential leak …
chromium-browser: Use after free in ANGLE (CVE-2020-6463) * chromium-browser: Inappropriate implementation in WebRTC (CVE-2020-6514) * Mozilla: Potential leak …
Data encryption has never been more important. New data protection and privacy regulations, such as GDPR, mean that companies storing unencrypted customer info…
GLib Networking was not properly verifying TLS certificates in all circumstances, possibly allowing an integrity/confidentiality compromise. [More...]