Cybersecurity
FBI alert on foreign apps and data security
The FBI issued a public notice this week that should alert anyone who uses their phone as a digital life center: applications developed outside the United States, and in particula…
Category of intelligence
Cybersecurity
News related to computer security, privacy and data protection
Cybersecurity
Treason in your code: how a single committed package exposes the weakness of the software supply chain
A few days ago it was confirmed that the open supply chain of npm suffered a serious incident: the popular Axios package was manipulated to distribute a malicious multiplatform so…
Cybersecurity
IA to Drive Rescue: Google activates by default ransomware detection and cloud restoration
Google has taken one more step in cloud protection against data sequestration: its Google Drive Ransomware Detection System, powered by IA models, is already available to all paym…
Cybersecurity
They filter the Claude Code code and reveal KAIROS: the persistent agent that could operate in the background
The past incident in Anthropic - where part of the source code of its programming assistant Claude Code became publicly available - recalls that even the companies most focused on…
Cybersecurity
Claude Code exposed by a source map: the human failure that leaked almost 2,000 files and reopened the debate on closed code
A human error today made news a product that Anthropic had so far kept closed: part of Claude Code's source code was accidentally published and quickly spread into public reposito…
Cybersecurity
IA, modeling and Git: the finding that exposes Vim and Emacs to remote code execution
In recent weeks, a security researcher got what seemed unlikely: finding failures that allow you to run remote code in two of the most veteran text editors in the free ecosystem, …
Cybersecurity
Google Play imposes developer verification: the real identity to stop malicious apps
Google has started officially deploying the verification of developers on Google Play, a measure designed to reduce the proliferation of malicious applications and those that are …
Cybersecurity
TrueChaos the failure in the TrueConf update that turned your server into a massive back door
A campaign aimed at government agencies in South-East Asia has taken advantage of a serious vulnerability in TrueConf's video conferencing client to turn its update mechanism into…
Cybersecurity
Vertex AI under threat a poorly configured agent can become a double agent and steal credentials in the cloud
A team of security researchers has exposed a blind area in Vertex AI of Google Cloud that deserves the immediate attention of any team that is deploying artificial intelligence ag…