Microsoft is patching nearly 60 CVEs in its February update for Windows 11, and six of them are zero day vulnerabilities.

Active exploitation of BeyondTrust enables unauthenticated RCE as CISA adds Apple, Microsoft, SolarWinds, and Notepad++ flaws ...

Catch up with this week's Microsoft stories in our weekly recap, including long-anticipated taskbar fixes in Windows 11, ...

A coordinated reconnaissance campaign targeting Citrix NetScaler infrastructure over the past week used tens of thousands of ...

The ransomware group breached SmarterTools through a vulnerability in the company's own SmarterMail product. SmarterTools recently disclosed a breach that occurred as a result of vulnerabilities the ...

Just one neglected server was enough to suffer a ransomware infection but this time, the damage was minimal.

Too slow react-ion time Baddies are exploiting a critical bug in React Native's Metro development server to deliver malware ...

Human error was identified as the leading cause of container security issues, cited by 62% of respondents. Developers also ...

Container security incidents are becoming a routine reality for software teams, and the tools meant to protect them may be making the problem worse.

So many CVEs, so little time Digital intruders exploited buggy SolarWinds Web Help Desk (WHD) instances in December to break into victims' IT environments, move laterally, and steal high-privilege ...

Microsoft reminds everyone that the initial wave of Secure Boot certificates, dropped in 2011, are due to expire.

Cisco Talos links UAT-9921 to VoidLink, a modular Zig-based malware targeting Linux cloud systems with stealth plugins and C2 control.