News related to computer security, privacy and data protection
A group behind the GhostAction campaign - already known for infiltrating GitHub Actions workflows into open source projects - has expanded its arsenal: in addition to installing m…
The IT ConnectWise management software provider confirmed that on October 17, 2026, it disable seven application identities and revoked certificates related to its Cloud Backup se…
Security researchers have identified a malicious package published in the npm record that is part of a supply chain campaign aimed at Windows and nicknamed MALFEX. The package, ca…
Today a chain of exploitation of local privileges against OpenBSD 7.9 was made public which, according to the report published by the security company Calif, allows an attacker to…
Palo Alto Networks Unit 42 researchers have linked an intrusion directed against a managed telecommunications service provider to a chain of attacks that culminated in the impleme…
The security community has confirmed a critical vulnerability in the Linux kernel network code that allows code that is already running within a virtual machine (VM) to read memor…
Security researchers have identified a traffic distrusion infrastructure (TDS) used for years to channel visitors to "technical support" phone scams and other fraud. The findings …
Cisco has reported critical vulnerability in its Secure Email Gateway application that allows an unauthenticated sender to write files in the device's operating system and, if the…
