Microsoft provides a workaround for users with Windows security update issues on Windows 11 24H2 systems. The problem occurs when installing Windows 11 from CDs or USB flash drives with October 2024 or November 2024 cumulative updates. This issue can…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning about a significant security vulnerability in Trimble Cityworks. This GIS-centric asset management software is widely used by municipalities and organizations. The flaw, identified as CVE-2025-0994, is actively…
ChaCha20-Poly1305 is a highly efficient and secure encryption algorithm that combines the ChaCha20 stream cipher with the Poly1305 message authentication code (MAC). This combination offers both encryption and authentication, making it a modern and reliable choice for safeguarding data. This…
Zyxel, a Taiwanese leader in networking equipment, has warned about two zero-day vulnerabilities in its legacy DSL CPE products. The company confirmed that these flaws, CVE-2024-40891 and CVE-2024-40890, will not receive patches. As a result, thousands of devices remain exposed…
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive for federal agencies to patch a critical vulnerability in the Linux kernel. This high-severity flaw, tracked as CVE-2024-53104, has actively been exploited in targeted attacks and could pose…
AMD has released critical firmware updates to address a high-severity security vulnerability, identified as CVE-2024-56161. This flaw allows attackers to load malicious microcode onto unpatched AMD CPUs due to a weakness in the microcode patch loader, which fails to properly…
The Lazarus Group, a North Korea-linked cybercrime group, is running a campaign using fake LinkedIn job offers in the cryptocurrency and travel sectors. The malware targets Windows, macOS, and Linux systems. Bitdefender’s cybersecurity experts discovered the attack, which uses multiple…
Cybersecurity experts have raised alarms about a recent software supply chain attack targeting the Go programming ecosystem. This attack involves a malicious package that provides unauthorized remote access to compromised systems. Details of the Malicious Package The package, identified as…
A new wave of cyber threats is sweeping through Brazil, with the emergence of a banking malware known as Coyote. This malware specifically targets Windows users and can execute various malicious activities, including keylogging, capturing screenshots, and deploying phishing overlays…
The Python Package Index (PyPI) has launched an innovative feature called ‘Project Archival’ to strengthen security in the open-source ecosystem. This system allows project maintainers to archive their projects, clearly signaling to users that no further updates or maintenance will…