Discover the top cybersecurity countries of 2025, ranked by their digital defence strength national security systems and ability to handle moderncyber

Samarbeid mellom norske og polske spesialstyrker er ett av flere punkter i en avtale som ble undertegnet mandag.

British companies have a decade to shore up their cybersecurity to make way for a new wave of quantum-powered attacks.

Discover the advantages of a custom domain email address: individuality, flexibility and security. Set up your own domain. Tips and tricks.

A think-tank claiming to be Singapore-based used AI-generated profiles to target security analysts and intelligence community members. Read more at straitstimes.com. Read more at straitstimes.com.

A prayer app used in Iran is believed to have been hacked after it told users to lay down their weapons after strikes by the U.S. and Israel.

Cybersecurity risks in aviation and space highlight the urgent need for Pakistan to adopt a resilient cyber defence posture.

YouTube video by My Notebook Overview

YouTube video by My Notebook Overview

Linux admins reeling from handling last month’s CopyFail and last week’s Dirty Frag kernel vulnerabilities have a new headache to deal with: Fragnesia. “This is a significant vulnerability,” Robert Beggs, head of incident response firm DigitalDefence, told _CSO_. “It is bypassing traditional filesystem permissions that are present and enforced (for example, ‘file is owned by root’, or ‘file is read-only’) to allow manipulation without touching the disk.” Similar to Dirty Frag, Fragnesia (CVE-2026-46300) is a local privilege escalation hole that exploits a vulnerability in the XFRM ESP-in-TCP subsystem to achieve a memory write primitive in the kernel. XFRM is an IP framework intended for packet transformations, and ESP-in-TCP (Encapsulating Security Payload in TCP) is a networking technique used to encapsulate IPsec ESP packets inside TCP segments. A proof of concept (PoC) exploit is already publicly available. The good news, Beggs said, is that the vulnerability can’t be exploited remotely. An attacker needs local access to trigger specific code paths and be able to control local socket operations and manipulate packet fragmentation. Still, he added, any unprivileged user can exploit the bug on a vulnerable system to corrupt security-sensitive files in memory, such as privileged access management configuration, password, systemd service files, or cron jobs. Although the attacker cannot modify the file on the disk, modifying in-memory files can trick privileged processes, alter system behavior, execute arbitrary code, and escalate privileges on the system, he said. Linux distributions including Red Hat, Ubuntu, AlmaLinux and others are pushing out patches or mitigations; CloudLinux said a patch is being tested. In a statement to _CSO_ , Mike McGrath, Red Hat’s vice-president of Core Platforms, said issuing mitigations and fixes for privilege escalations like Fragnesia are a top priority. “We have published workarounds for the esp4 and esp6 kernel modules that we feel provide protection to customers in the immediate term while we work with the upstream community to identify a permanent fix in the form of a patch,” he said. According to Linux support provider TuxCare, systems running the affected _skbuff_ code paths, including kernels that have already received the Dirty Frag fix, are impacted. The public PoC requires systems with the configuration option _CONFIG_INET_ESPINTCP_ to access the bug, so kernels built without it block this exploit. But the underlying _skbuff_ defect may be reachable through other paths. Microsoft urges Linux users and organizations to apply the patch as soon as possible by running update tools. If patching is not possible at this point, consider applying the same mitigations as for Dirty Frag, such as assessing whether esp4, esp6, and related xfrm/IPsec functionality can be temporarily disabled safely, restricting unnecessary local shell access, hardening containerized workloads, and increasing monitoring for abnormal privilege escalation activity. **Related content: Kill switch for Linux kernel features proposed to improve security** Beggs advises system administrators to confirm kernel exposure by reviewing version numbers, and then update to a patched kernel if necessary and reboot the affected system. If ESP-in-TCP is not required, disable the module and block its use; this mitigation can also be immediately applied until patching is complete. Because the vulnerability requires local access, make sure that basic steps such as enforcing MFA for privileged accounts, disabling of unneeded shell access, and enforcing least privilege are all in place. Beggs also said admins may wish to increase monitoring of privileged processes (PAM, systemd, cron) and look for unexpected restarts, unexpected config reloads, and sudden privilege escalations.

Linux admins who have enabled the unprivileged user namespace restriction in their recent Ubuntu environments should take action to close three new vulnerabilities that allow a threat actor to bypass the supposed protection. This warning comes after researchers at Qualys found three different ways this hardening feature can, under certain circumstances, be bypassed. “It needs to be addressed quickly,” said Robert Beggs, CEO of Canadian incident response firm DigitalDefence, which has several Ubuntu-based applications in its portfolio, “because it facilitates other exploits. By itself, not a major thing. But if something else comes out it can be chained to these [vulnerabilities] and cause a lot of damage.”

Linux admins who have enabled the unprivileged user namespace restriction in their recent Ubuntu environments should take action to close three new vulnerabilities that allow a threat actor to bypass the supposed protection. This warning comes after researchers at Qualys found three different ways this hardening feature can, under certain circumstances, be bypassed.  “It needs to be addressed quickly,” said Robert Beggs, CEO of Canadian incident response firm DigitalDefence, which has several Ubuntu-based applications in its portfolio, “because it facilitates other exploits.

„Herr Bundeskanzler, wenn Sie uns helfen wollen – dann tun Sie es bitte doppelt so schnell. Und mit doppelter Entschlossenheit.“Oleksii Teplukhin, ukrainischer…

Niël Terblanché Namibia has officially launched its national Cyber Security Incident Response Team (NAM-CSIRT), a dedicated unit aimed at bolstering the country’s digital defences amid a rising tide of cyber threats. The minister of information and communication technology, Emma Theofelus, officiated at the launch in Windhoek on Monday. Theofelus described the launch of NAM-CSIRT as not just a unit, but as national defence against cyber threats. She added that the initiative embodies our commitment to safeguarding Namibia’s critical information infrastructure and ensuring the protection of our citizens’ personal data, businesses’ intellectual property, and the integrity of our public and private business operations. According to the minister, the NAM-CSIRT will operate under the Ministry of Information and Communication Technology (MICT), with initial seed funding of N$20 million already committed. “If I had it my way, I would increase the funding 10 times over right now,” she said. She stressed that the funding would go towards acquiring essential threat intelligence tools, infrastructure, and skilled personnel to ensure the team is properly equipped. Theofelus warned that Namibia’s critical infrastructure—including sectors such as energy, healthcare, and financial services—is vulnerable to cyberattacks, particularly as the country embraces digitalisation and the Fourth Industrial Revolution. “The implications of a successful cyber incident can be catastrophic. We must recognise that our infrastructure is at risk,” she said. The minister added that the newly launched NAM-CSIRT website will serve as an operational platform offering incident reporting tools, cybersecurity best practices, and threat updates. “It symbolises the full operationalisation of our National Cyber Incident Response Team,” Theofelus said. She stressed the need for collective responsibility and urged all stakeholders—including government bodies, public enterprises, and the private sector—to actively collaborate with NAM-CSIRT. “Cybersecurity is a shared responsibility. Through collaboration, we can create a network of cyber resilience that will strengthen our national security,” she said Theofelus also made a commitment to supporting legislative efforts, including the Cybercrime Bill and the Data Protection Bill, noting the emotional and financial toll cyberattacks have on Namibians. “It erodes trust in technology. As a caring government, we are not happy when our country is under attack,” she added Theofelus urged the nation to be vigilant, proactive, and responsible.