Security News

Zimbra Releases Security Updates for SQL Injection, Stored XSS, and SSRF Vulnerabilities
2025-02-10 09:09

Zimbra has released software updates to address critical security flaws in its Collaboration software that, if successfully exploited, could result in information disclosure under certain...

Security validation: The new standard for cyber resilience
2025-02-10 05:30

Security validation has officially turned a corner. Once considered a “nice-to-have” it’s now a top priority for security leaders worldwide. This shift has been accelerated by frameworks like...

DeepSeek's iOS app is a security nightmare, and that's before you consider its TikTok links
2025-02-10 02:30

PLUS: Spanish cops think they've bagged NATO hacker; HPE warns staff of data breach; Lazy Facebook phishing, and more! Infosec In Brief DeepSeek’s iOS app is a security nightmare that you should...

Microsoft shares workaround for Windows security update issues
2025-02-07 13:53

Microsoft has shared a workaround for users affected by a known issue that blocks Windows security updates from deploying on some Windows 11 24H2 systems. [...]

Dems want answers on national security risks posed by hiring freeze, DOGE probes
2025-02-06 18:30

Are cybersecurity roles included? Are Elon's enforcers vetted? Inquiring minds want to know Elected officials are demanding answers as to whether the Trump administration and Elon Musk's...

On Generative AI Security
2025-02-05 12:03

Microsoft’s AI Red Team just published “Lessons from Red Teaming 100 Generative AI Products.” Their blog post lists “three takeaways,” but the eight lessons in the report itself are more useful:...

The API security crisis and why businesses are at risk
2025-02-05 04:30

In this Help Net Security video, Ivan Novikov, CEO of Wallarm, discusses the 2025 API ThreatStats Report, highlighting how APIs have become the primary attack surface over the past year, mainly...

Cyber agencies share security guidance for network edge devices
2025-02-04 18:24

Five Eyes cybersecurity agencies in the UK, Australia, Canada, New Zealand, and the U.S. have issued guidance urging makers of network edge devices and appliances to improve forensic visibility to...

Grubhub serves up security incident with a side of needing to change your password
2025-02-04 15:30

Contact info and partial payment details may be compromised US food and grocery delivery platform Grubhub says a security incident at a third-party service provider is to blame after user data was...

Watch Out For These 8 Cloud Security Shifts in 2025
2025-02-04 11:00

As cloud security evolves in 2025 and beyond, organizations must adapt to both new and evolving realities, including the increasing reliance on cloud infrastructure for AI-driven workflows and the...