News

Rank Math PRO 3.0.123 shipped with a self-rebuilding backdoor for about eleven hours. Here is who is affected and how to clean up.

OSINT is the practice of turning public information into security insight. Here is how attackers and testers use it, what it reveals about your business and how to shrink your …

The Synnovis attack hit London hospitals through one supplier. Here are five questions that show whether your own suppliers could take you down.

Attackers reached refrigeration controllers at French supermarkets and warmed fridges overnight. Here is what is known, what is not, and what to check in your own premises.

The latest North Korean IT worker case needed no exploit, only a convincing interview. Why hiring is now part of your security perimeter.

Citizen Lab has shown that a targeted ad was enough to infect Al Jazeera devices with Candiru spyware, no click needed. Here is how it worked and what UK organisations …

Attackers briefly swapped files on AOMEI’s update servers so that Backupper installs downloaded a backdoor. Here is what Google and ManageEngine found.

An attacker used a credential for ConnectWise’s Cloud Backup app to sign in to Microsoft 365 tenants one by one. Here is what happened and the checks to run this …

A Linux kernel networking flaw, CVE-2026-99999, lets code in a guest VM leak host memory. Here is how it works and what to patch.

Ledger confirmed a hardware implant in a wallet sold by a Southeast Asian reseller. Here is what is known, what is not, and what businesses should check about the devices …