Two critical OpenSSH vulnerabilities have been discovered: a Man-in-the-Middle flaw (CVE-2025-26465) affecting versions 6.8p1-9.9p1 and a Denial-of-Service vulnerability (CVE-2025-26466) in versions 9.5p1-9.9p1. These flaws could enable server impersonation and system disruption. Both issu...
Weekly cybersecurity roundup highlighting major incidents including record $1.5B crypto theft by North Korean Lazarus Group, OpenAI's ban on malicious users, Apple's UK encryption stance, and various security threats from state-sponsored groups. Notable developments include legal actions a...
Australia bans Kaspersky security software from government systems due to national security risks, requiring removal by April 2025. The decision addresses concerns about foreign interference, data collection practices, and potential exposure to foreign government directives, following simi...
Google Cloud introduces quantum-safe digital signatures in Cloud KMS, implementing NIST's post-quantum cryptography standards with ML-DSA-65 and SLH-DSA-SHA2-128S algorithms. This advancement protects against future quantum computing threats and 'harvest now, decrypt later' attacks, offeri...
A new PayPal scam exploits the platform's address settings to send authentic-looking purchase notifications from PayPal's official email address. Cybercriminals add new addresses containing scam messages to accounts, triggering legitimate confirmation emails about fake MacBook purchases. T...
