Cybersecurity News
-
Critical Security Vulnerability Discovered in Dovecot IMAP Server
The Dovecot team has issued a security advisory for a vulnerability affecting versions 2.4.0 and 2.4.1 of the popular open-source IMAP server. The flaw, identified as CVE-2025-30189, could allow unauthorized access to…
-
Dell Releases Critical Security Updates Across Multiple Products
Dell Technologies has issued multiple security advisories addressing critical vulnerabilities across several enterprise products, with fixes now available for systems ranging from cloud platforms to data protection appliances. Organizations using affected Dell…
-
Docker Compose Patched for Path Traversal Vulnerability in Remote Files
A new high-severity vulnerability has been disclosed in Docker Compose, identified as a path traversal flaw in how the tool handles remote OCI (Open Container Initiative) artifacts. The issue, published under advisory…
-
Researchers Find Huge YouTube Malware Network With Thousands of Videos
Researchers at Check Point have exposed and helped dismantle a large-scale malware operation that exploited YouTube to distribute dangerous software. The campaign, active since at least 2021, used thousands of videos to…
-
TP-Link Patches Critical Security Vulnerabilities in Omada Gateway Products
TP-Link has issued a security advisory addressing two significant vulnerabilities affecting multiple Omada gateway models. Organizations using these devices should prioritize patching to mitigate potential security risks. While the vulnerabilities require adjacent…
-
Meta’s New Anti-Scam Tools to Protect User
October marks Cybersecurity Awareness Month, an important reminder to stay vigilant about online threats. As cybercriminals become increasingly sophisticated, one group that remains disproportionately targeted is older adults. In 2024, reports show…
-
New Research Shows WiFi Signals Can Identify People Without Devices
We’ve all gotten used to the idea that our smartphones track us. But what if you could be identified and tracked through WiFi signals even when you’re not carrying any device at…
-
New Android Attack, Pixnapping, Can Steal 2FA Codes Without Permissions
A newly disclosed Android vulnerability, dubbed Pixnapping, allows malicious apps to steal sensitive on‑screen information — including 2FA codes, chat messages, and location history — without needing any system permissions. The attack,…
-
AI Companion Apps Expose Private Data of 400K+ Users
Two AI companion applications have left hundreds of thousands of users’ intimate conversations and personal media completely exposed online, according to security researchers at Cybernews who discovered the vulnerability in late August.…