News related to computer security, privacy and data protection
In recent weeks, the security community has given the alarm for a campaign that exploits confidence in the Go ecosystem supply chain. Researchers have identified a malicious modul…
The U.S. Cyber Security and Infrastructure Agency (CISA) has expanded technical information on a silent threat that has been taking advantage of a critical failure on Ivanti Conne…
When talking about attack surface, the conversation tends to start where it is easy to show: servers, identity, VPNs, cloud loads. They are visible, searchable and audible element…
The security community recently put the magnifying glass back on a North Korean-related group known in the world as ScarCruft or APT37. Zscaler researchers gave a complex and well…
In recent days, a tactic that computer criminals know well has again been highlighted: to take advantage of users' interest in video game-related utilities and mods to deceive the…
Meta has taken a visible legal step against a problem that is growing in the shadow: the use of misleading ads to scam users on their platforms. The company filed claims against s…
A few months ago, it silently changed a assumption that many developers took for granted: the Google Cloud API keys that were placed on public websites for loads such as maps or v…
The war between those who create malware and those who try to stop it doesn't stop mutating, and the latest trend is ingenious and, at the same time, deeply worrying: some operato…
This week Trend Micro released patches for two critical failures on its Apex One endpoint protection platform that, if not corrected, allow an attacker to run code remotely on vul…
