Errors are annoying; they cause unexpected behaviors and sometimes expose sensitive information if they are not handled well. In the second chapter of Secure Coding 101, we will explore effective error handling techniques and the importance of logging security events…
Secure coding is an essential topic for secure applications, and it’s one of the most important steps to make an app better for everyone. Without proper security measures in the code, significant damage can occur to systems, and systems can…
Cybersecurity experts raise alarms about a new malware campaign that exploits cracked software to spread information stealers, specifically Lumma and ACR Stealer. The AhnLab Security Intelligence Center (ASEC) reports a significant increase in ACR Stealer distribution since January 2025. Dead…
A new variant of the Snake Keylogger malware actively targets Windows users in China, Turkey, Indonesia, Taiwan, and Spain. According to Fortinet FortiGuard Labs, this version has caused over 280 million blocked infection attempts globally since the start of the…
Recent findings from the Qualys Threat Research Unit (TRU) have unveiled two significant security vulnerabilities in the OpenSSH suite, a widely used tool for secure networking. These flaws, if exploited, could lead to serious security breaches, including man-in-the-middle (MitM) attacks…
The free-to-play game PirateFi, available on the Steam store, distributes the Vidar infostealing malware to unsuspecting players. The game was live on the platform for nearly a week, from February 6th to February 12th, and approximately 1,500 users downloaded it.…
Microsoft has unveiled a new variant of the notorious XCSSET macOS malware, marking its first major update since 2022. This latest iteration showcases advanced obfuscation tactics, enhanced persistence mechanisms, and innovative infection strategies, posing a heightened threat to macOS users.…
China-based cyber threat group known as Emperor Dragonfly has implicated itself in a ransomware attack that uses tools typically associated with state-sponsored espionage. This incident involved the deployment of RA World ransomware against an Asian software and services firm, with…
Google recently clarified the functionality of its new Android System SafetyCore app, emphasizing that it does not perform client-side scanning of user content. This statement addresses rising concerns about privacy and data security in the digital landscape. On-Device Protections A…
Zimbra, a leading provider of collaboration software, recently announced crucial security updates to address several critical vulnerabilities in its platform. These flaws pose serious risks to users and organizations that rely on Zimbra’s services, as they could lead to significant…