· Important
iOS 18.7.11 for older iPhones: flaw used in attacks
Apple fixed a flaw that was used in targeted attacks on iPhones running iOS 18 or older. Update older iPhones and iPads today.
Security alerts
Security holes attackers are using right now in websites, phones, browsers and servers, and the update to install today to keep your business safe.
All Security
26 posts
Every topic in Security.
Security alerts
12 posts
Security holes attackers are using right now in websites, phones, browsers and servers, and the update to install today to keep your business safe.
Latest: SonicWall SSL VPN flaw under attack: check your MFA login
Scams and phishing
5 posts
Fake emails, calls, SMS and websites, and how to check before you pay.
Latest: Fake virus alerts in Edge: how to block scam notifications
Passwords and logins
1 post
Strong passwords, two-step login and passkeys for staff and owners.
Latest: Gmail security checkup: see who can open your inbox
Hacked website or email
1 post
Signs your site or mailbox was hacked and what to do first.
Latest: Website hacked or broken? What to do in the first hour
Ransomware and data breaches
1 post
Ransomware, leaked data and what the law asks you to do after a breach.
Latest: Malaysia Airlines data breach: watch for fake travel emails
SonicWall SSL VPN flaw under attack: check your MFA login
Attackers are using a SonicWall SSL VPN flaw that can skip SAML and two-step login. Update the firewall and check VPN accounts.
Fake PDRM summons SMS steals card details and OTPs
An SMS from "PDRM" about an unpaid parking ticket leads to a fake MyBayar PDRM page that takes your card and OTP. Do not click.
Fake BNM Mobile Security app steals bank cards: what to do
Scammers call pretending to be Bank Negara or police, then get victims to install a fake app and tap their cards. Never do it.
PHP2Shell attacks on Palo Alto, Citrix and F5: update now
Attackers are using the PHP2Shell flaws to take over Palo Alto firewalls. Update the firewall and keep its admin page off the internet.
Ivanti Connect Secure VPN flaws under attack: update now
Attackers are using flaws in Ivanti Connect Secure VPN gateways to steal logins and data. Install Ivanti's latest fixed release now.
Cisco ASA and FTD firewall VPN flaw under attack: update now
Attackers are using a flaw that can restart Cisco ASA and FTD firewalls running remote access VPN. Install Cisco's fixed release.
Synology NAS ransomware attacks: update old DSM now
Synology says attackers are encrypting NAS boxes that still run old DSM. Check your version, update DSM today and turn on auto updates.
WordPress 7.1.4 security update: what to do
WordPress 7.1.4 fixes more than ten holes, one in the update process that attackers now use. Update your site today and check it after.
Linux kernel flaw Fragnesia exploited: update, reboot
CISA says the Fragnesia Linux kernel flaw is now used in attacks. Install the kernel update on your Linux servers and restart them.