Technology & Cybersecurity Intelligence
Curated security alerts, vulnerabilities, operating-system updates, cloud and AI news, and vendor advisories from trusted sources.
Attackers are increasingly targeting the processes used to establish or recover identity rather than attacking the login itself. Specops explains how stronger identity verification…
Microsoft updated its Windows PowerToys toolset with a new utility dubbed "Window Hopper" that lets users switch between an app's windows more quickly. [...]
Meta on Tuesday announced a set of WhatsApp account security features, including support for multiple passkeys to a single account to help users with…
WhatsApp has started rolling out several new account security features, including support for multiple passkeys and stronger two-step verification. [...]
Marimo has addressed a high-severity security flaw in its notebook software that allowed an attacker to execute an attacker-supplied Model Context Protocol (MCP) command…
Threat actors have already compromised over 270 Zimbra instances in remote code execution attacks targeting a high-severity Zimbra Collaboration Suite (ZCS) vulnerability. [...]
Advisory at a Glance Title A Tale of Two SOCs: Insights From Two Red Team Assessments Original Publication August 25, 2026 Executive Summary The…
Thousands of companies have been affected by the Mirage2FA campaign from 2024 to 2026. The commercial phishing-as-a-service toolkit targets Microsoft 365 accounts by abusing…
Cybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as free phishing infrastructure for redirecting to…
Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead drop resolvers (DDRs) to deliver two previously unreported remote…
Vulnerability management has been a staple of security programs since the dawn of the cybersecurity discipline. The symbiotic relationship between vulnerability and patch management…
Law enforcement agencies from 22 countries helped identify 263 suspects and arrested 58 individuals linked to cybercrime networks coordinated by African crime groups. [...]
Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin that make it…
A security advisory for Mageia 10 announces updates addressing multiple vulnerabilities fixed in the kernel version 6.18.44, involving numerous CVEs, enhancing overall system security.
Mageia 10 has updated its kernel to version 6.18.44, addressing multiple vulnerabilities and bugs, while specific packages were also revised for compatibility with the…
An update for Mageia 10 improves installation of lxqt on Wayland, recommending suitable window managers and enhancing usability, while disabling sessions for niri and…
Mageia released updates for version 10 to correct outdated copyright dates in various tools and packages, ensuring the accuracy of copyright information in the…
The opencpn-radar-plugin version 5.7.2 released on Aug 25, 2026, addresses a bug by implementing a 1 MB stack for radar locator threads in navico…