Abeerah Hashim

Google Cloud users will soon have to use multi-factor authentication, if they haven’t yet, as Google mandates MFA. Though this won’t be an abrupt move as Google plans a phased transition to facilitate users.

Microsoft patched numerous zero-days and critical vulnerabilities with November 2024 Patch Tuesday, urging users to update asap.

Glove stealer employs additional malware payloads to bypass Chrome's app-bound encryption and steal stored information.

Besides releasing the zero-day patches for its Intel-based Macs, Apple also released fixes for its iPhones, iPads, and Apple Vision.

Microsoft introduces support for third-party passkey services with the latest Windows 11 Insider Build, alongside other feature upgrades.

Multiple critical vulnerabilities existed in the WordPress plugin Spam protection, Anti-Spam, FireWall. Exploiting these vulnerabilities could allow remote code execution on target websites, and more. Since the plugin developers have patched the flaws, WordPress users must update their sites with the latest plugin release at the earliest.

The threat actor group RomCom have exploited two zero days in its recent backdoor campaigns. While patches for both zero-day vulnerabilities are available, users must update their systems with the fixes to avoid the threat as it exploits unpatched systems.

Researchers have identified a new attack strategy that allows malicious updates to be installed on target systems. Dubbed “NachoVPN,” the attack targets corporate clients, such as Palo Alto and SonicWall SSL-VPN clients, by exploiting unpatched vulnerabilities.

US CISA warns water and wastewater facilities to secure their systems as the threat actors may scan the web for vulnerable HMIs to exploit.

Microsoft addressed 16 critical vulnerabilities, and a zero-day flaw with December Patch Tuesday, prompting users to update their systems.