Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Google's Kernel Runtime Security Instrumentation (KRSI) Is Something To Look Forward To In 20
Back in September was an initial "request for comments" by Google on some kernel work they are doing with Kernel Runtime Security Instrumentation (KRSI) for pr…
Google Jazzes Up Its Patch Reward Program With Upfront Financial Support
Google has announced updates to its existing Patch Reward Program. Beginning in 2020, Google will provide upfront financial support toGoogle Jazzes Up Its Patc…
MixCloud Suffered Data Breach Affecting 21 Million Users
The music streaming service MixCloud has fallen prey to a cybersecurity incident. It seems MixCloud has suffered a data breachMixCloud Suffered Data Breach Aff…
Google Expands Their Android Bug Bounty Program To Award Up To $1.5 Million
Google has recently made a lucrative announcement for bug bounty hunters. Reportedly, Google expanded their bug bounty program for AndroidGoogle Expands Their …
Google Discloses Zero-Day Vulnerability In Chrome Browser Under Active Exploitation
This week Google has made a revelation for their users regarding a zero-day vulnerability in the Google Chrome browser underGoogle Discloses Zero-Day Vulnerabi…
5 cloud security basics and best practices
How much do you know about cloud security? Companies that move to the cloud have to assume new responsibilities, develop new skill sets and implement new proce…
Google Plans To Block Mixed Content With HTTPS On Chrome Browser
Recently, Google has involved itself in numerous privacy and security changes within Google Chrome. The most important of these wasGoogle Plans To Block Mixed …
Google To Alert Breached Passwords With Easy Password Checkup Tool
Beginning this year, Google is seemingly working towards improving user accounts' security. In February this year, Google announced the launchGoogle To Alert B…
Thousands of Google Calendars Possibly Leaking Private Information Online
"Warning ' Making your calendar public will make all events visible to the world, including via Google search. Are you sure?"Remember this security warning? No…
How Cloud-Based Automation Can Keep Business Operations Secure
The massive data breach at Capital One ' America's seventh-largest bank, according to revenue ' has challenged many common assumptions about cloud computing fo…
SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch
A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts.The vulnerability, tracked as CVE-2026-58231, …
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution.…
Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts
Malware running as an ordinary user on a Windows machine can sign into a victim's passkey-protected accounts without a fingerprint, a PIN, or anything at all a…
Google and FBI Dismantle NetNut Residential Proxy Botnet
Google, the FBI and the IRS Criminal Investigation division disrupted NetNut, a residential proxy network built on two million hijacked devices and used by 316…
PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems
Cybersecurity researchers have disclosed details of a new credential theft framework dubbed PCPJack that targets exposed cloud infrastructure and ousts any art…
New Chaos Variant Targets Misconfigured Cloud Deployments, Adds SOCKS Proxy
Cybersecurity researchers have flagged a new variant ofmalware called Chaosthat'scapable of hitting misconfigured cloud deployments, marking an expansion of th…
Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069
Google has formally attributed the supply chain compromise of the popular Axios npm package to a financially motivated North Korean threat activity cluster tra…
Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool
Salesforce has warned of an increase in threat actor activity that's aimed at exploiting misconfigurations in publicly accessible Experience Cloud sites by mak…
Evaluating 5 Best Security Platforms for Hybrid Cloud Environments
Securing a hybrid cloud environment can be complex. As workloads move to on-premises data centers…Evaluating 5 Best Security Platforms for Hybrid Cloud Environ…
When Cloud Outages Ripple Across the Internet
Recent major cloud service outages have been hard to miss. High-profile incidents affecting providers such as AWS, Azure, and Cloudflare have disrupted large p…
DevOps & SaaS Downtime: The High (and Hidden) Costs for Cloud-First Businesses
Just a few years ago, the cloud was touted as the “magic pill” for any cyber threat or performance issue. Many were lured by the “always-on” dream, trading gra…
New Advanced Linux VoidLink Malware Targets Cloud and container Environments
Cybersecurity researchers have disclosed details of a previously undocumented and feature-rich malware framework codenamed VoidLink that's specifically designe…
Webinar: How Attackers Exploit Cloud Misconfigurations Across AWS, AI Models, and Kubernetes
Cloud security is changing. Attackers are no longer just breaking down the door; they are finding unlocked windows in your configurations, your identities, and…
Learn How Leading Companies Secure Cloud Workloads and Infrastructure at Scale
You’ve probably already moved some of your business to the cloud—or you’re planning to. That’s a smart move. It helps you work faster, serve your customers bet…