The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
GNOME 50 finally drops X11 for good. Jordan Petridis called it on the GNOME blog, and the change landed with Mutter's merge request !4505. That's the code that…
Cybersecurity researchers have flagged a malicious Visual Studio Code (VS Code) extension with basic ransomware capabilities that appears to be created with th…
Cisco on Wednesday disclosed that it became aware of a new attack variant that's designed to target devices running Cisco Secure Firewall Adaptive Security App…
After the recent update, WhatsApp users can experience passkey-secured backups for their conversations. WhatsApp has…WhatsApp Rolls Out Passkey-Secured Backups…
IntroductionFinancial institutions are facing a new reality: cyber-resilience has passed from being a best practice, to an operational necessity, to a prescrip…
Cybercrime has stopped being a problem of just the internet — it’s becoming a problem of the real world. Online scams now fund organized crime, hackers rent vi…
SonicWall has formally implicated state-sponsored threat actors as behind the September security breach that led to the unauthorized exposure of firewall confi…
Linux security entered new territory in 2025. Espionage groups that once focused on Windows began treating Linux as equal ground. The Russia-aligned Curly COMr…
Google on Wednesday said it discovered an unknown threat actor using an experimental Visual Basic Script (VB Script) malware dubbed PROMPTFLUX that interacts w…
Cybersecurity researchers have disclosed a new set of vulnerabilities impacting OpenAI's ChatGPT artificial intelligence (AI) chatbot that could be exploited b…
A penetration tester can build a security workstation on almost any Linux distribution. The problem is the amount of setup that comes with it. Scanners, packet…
What is Kali Linux? The 2025 Guide for Security OperationsKali Linux is a Debian-based system built and maintained by Offensive Security. It's made for penetra…
Ransomware is malicious software designed to block access to a computer system or encrypt data until a ransom is paid. This cyberattack is one of the most prev…
Google's artificial intelligence (AI)-powered cybersecurity agent called Big Sleep has been credited by Apple for discovering as many as five different securit…
Federal prosecutors in the U.S. have accused a trio of allegedly hacking the networks of five U.S. companies with BlackCat (aka ALPHV) ransomware between May a…
Cybersecurity researchers have flagged a new malicious extension in the Open VSX registry that harbors a remote access trojan called SleepyDuck.According to Se…
Security Operations Centers (SOC) today are overwhelmed. Analysts handle thousands of alerts every day, spending much time chasing false positives and adjustin…
The OverlayFS bug in Ubuntu last year slipped through normal testing. Nothing exotic, a permissions issue in the filesystem layer that let local users climb th…
The Australian Signals Directorate (ASD) has issued a bulletin about ongoing cyber attacks targeting unpatched Cisco IOS XE devices in the country with a previ…
A suspected nation-state threat actor has been linked to the distribution of a new malware called Airstalk as part of a likely supply chain attack.Palo Alto Ne…
MSPs are facing rising client expectations for strong cybersecurity and compliance outcomes, while threats grow more complex and regulatory demands evolve. Mea…
A design firm is editing a new campaign video on a MacBook Pro. The creative director opens a collaboration app that quietly requests microphone and camera per…
CVE-2025-4517 sits inside Python's packaging stack. It turns archive extraction into an arbitrary file-write vector that hits core supply chain security. On pa…
The open-source command-and-control (C2) framework known as AdaptixC2 is being used by a growing number of threat actors, some of whom are related to Russian r…