News related to computer security, privacy and data protection
A new report from the cybersecurity community draws the figure of a persistent and sophisticated actor, identified by Cisco Talos as UAT-8302, which has been exploiting tools and …
When you talk about open source software out of support, the conversation usually remains obvious: there will be no patches anymore. That truth is real, but insufficient; there ar…
The OAuth architecture was designed to facilitate interoperability between services: a user gives permission to an application to act on his behalf without sharing his password. T…
Google has reconfigured its vulnerability rewards programs forand, at the same time, adjust to the low payments for vulnerabilities whose detection has become trivial with artific…
A group linked to the North Korean State known as ScarCruft has carried out a supply chain espionage operation that alters components of a video game platform aimed at the Korean …
The conviction of 8.5 years in prison imposed in the United States on Latvian citizen Deniss Zolotarjovs marks a precedent in the fight against digital extortion networks: he was …
A critical failure in the Weaver Eco-cology office automation platform (identified as CVE-2026-22679) has been actively exploited since mid-March to execute discovery commands on …
In recent weeks, a particularly worrying phenomenon has been observed: malicious actors are taking advantage of the legitimate service of Amazon Simple Email Service (SES) as infr…
An active phishing campaign detected since at least April 2025 is exploiting confidence in legitimate remote management tools to achieve and maintain persistent access to corporat…
