The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A "coordinated developer-targeting campaign" is using malicious repositories disguised as legitimate Next.js projects and technical assessments to trick victim…
Cybersecurity researchers have disclosed details of a new malicious package discovered on the NuGet Gallery, impersonating a library from financial services fi…
You locked down SSH, hardened systemd services, tuned auditd, and felt reasonably confident about your Linux security posture. Then a Kubernetes cluster shows …
You can lock down UFW or nftables, tighten SSH, layer in fail2ban, and still not know what is actually moving across your network. At some point, that gap beco…
Alisa Viejo, CA, United States, 25th February 2026, CyberNewswireOne Identity Appoints Michael Henricks as Chief Financial and Operating Officer on Latest Hack…
Cybersecurity researchers have discovered four malicious NuGet packages that are designed to target ASP.NET web application developers to steal sensitive data.…
Why automating sensitive data transfers is now a mission-critical priorityMore than half of national security organizations still rely on manual processes to t…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a recently disclosed vulnerability in FileZen to its Known Exploited Vulnerab…
Open any internet-facing Linux server and check /var/log/auth.log or run journalctl -u ssh. If it has been up for more than a few minutes, you will see it. Rep…
Open any internet-facing Linux server and check /var/log/auth.log or run journalctl -u ssh. If it has been up for more than a few minutes, you will see it. Rep…
Wilmington, North America, 24th February 2026, CyberNewswireSendmarc Releases DMARCbis Fireside Chat Featuring Co-Editor Todd Herr on Latest Hacking News | Cyb…
A Russia-aligned threat actor has been observed targeting a European financial institution as part of a social engineering attack to likely facilitate intellig…
QR codes were originally designed for industrial logistics. They were optimized for efficiency, not security. In recent years, they have become embedded across…
The North Korea-linked Lazarus Group (aka Diamond Sleet and Pompilus) has been observed using Medusa ransomware in an attack targeting an unnamed entity in the…
The Russia-linked state-sponsored threat actor tracked as APT28 has been attributed to a new campaign targeting specific entities in Western and Central Europe…
Security news rarely moves in a straight line. This week, it feels more like a series of sharp turns, some happening quietly in the background, others playing …
Cybersecurity researchers have disclosed what they say is an active "Shai-Hulud-like" supply chain worm campaign that has leveraged a cluster of at least 19 ma…
You've probably heard that Wireguard is simpler and more secure. That sounds good, but it doesn't answer the question you actually have to deal with, which is …
Artificial intelligence (AI) company Anthropic has begun to roll out a new security feature for Claude Code that can scan a user's software codebase for vulner…
With $5.5 trillion in global AI risk exposure and 700,000 U.S. workers needing reskilling, four new AI certifications and Certified CISO v4 help close the gap …
You've probably used GPG already. Maybe indirectly through package updates, maybe signing a Git commit because the repo required it, maybe encrypting a backup …
In yet another software supply chain attack, the open-source, artificial intelligence (AI)-powered coding assistant Cline CLI was updated to stealthily install…
Cybersecurity researchers have disclosed details of a new ClickFix campaign that abuses compromised legitimate sites to deliver a previously undocumented remot…
With one in three cyber-attacks now involving compromised employee accounts, insurers and regulators are placing far greater emphasis on identity posture when …