The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
As security practices continue to evolve, one primary concern persists in the minds of security professionals—the risk of employees unintentionally or delibera…
Government entities, military organizations, and civilian users in Ukraine and Poland have been targeted as part of a series of campaigns designed to steal sen…
As many as 196 hosts have been infected as part of an aggressive cloud campaign mounted by the TeamTNT group calledSilentbob."The botnet run by TeamTNT has set…
A type confusion issue that may have been actively exploited has been identified in the WebKitGTK web engine (CVE-2023-32439). With a low attack complexity and…
Exploit code will soon become available for a critical vulnerability in the Linux kernel that a security researcher discovered and reported in mid-June. Dubbed…
Microsoft on Tuesdayrevealedthat it repelled a cyber attack staged by a Chinese nation-state actor targeting two dozen organizations, some of which include gov…
With the threat of security breaches continually on the rise, it's time to take your operating system seriously -- and Linux is your best friend in this never-…
A security issue was discovered in MediaWiki, a website engine for collaborative work, which could result in information disclosure when SQLite files are creat…
Several important security issues were discovered in the Vim enhanced vi editor, including an out-of-bounds read vulnerability (CVE-2022-0128), improper memory…
CISOs, security leaders, and SOC teams often struggle with limited visibility into all connections made to their company-owned assets and networks. They are hi…
JumpCloud, a provider of cloud-based identity and access management solutions, has swiftly reacted to an ongoing cybersecurity incident that impacted some of i…
Cybersecurity agencies have warned about the emergence of new variants of the TrueBot malware. This enhanced threat is now targeting companies in the U.S. and …
Several remotely exploitable security issues were found in the Bind Internet Domain Name Server. It was discovered that Bind incorrectly handled the cache size…
Several security issues were found in the Linux kernel, including an out-of-bounds write vulnerability in the Flower classifier implementation in the kernel (C…
A sophisticated stealer-as-a-ransomware threat dubbedRedEnergyhas been spotted in the wild targeting energy utilities, oil, gas, telecom, and machinery sectors…
Multiple remotely exploitable denial of service (DoS) and code execution vulnerabilities have been found in the VLC multimedia player and streamer. These bugs …
Fortinet has rolled out updates to address a critical security vulnerability impacting its FortiNAC network access control solution that could lead to the exec…
With the rapid growth of technology and the increasing importance of data, securing your organization’s…Optimizing Network Security for Administrators on Lates…
Several important denial of service (DoS) and information disclosure vulnerabilities have been discovered in the OpenJDK Java runtime. These bugs require no pr…
Fourteen important vulnerabilities have been discovered in Chromium, including multiple use-after-free and type confusion bugs. With a low attack complexity an…
In the digital age, data has become the lifeblood of our interconnected world. It fuels…Norton Parent Ransomware Attack on Latest Hacking News | Cyber Security…
A highly targeted cyber attack against an East Asian IT company involved the deployment of a custom malware written in Golang calledRDStealer."The operation wa…
A new information-stealing malware calledMystic Stealerhas been found to steal data from about 40 different web browsers and over 70 web browser extensions.Fir…
Several important security vulnerabilities have been found in the c-ares fork of the ares library, including a 0-byte UDP payload denial of service (DoS) bug (…