News related to computer security, privacy and data protection
The recent exposure of the operation known as FortiBleed confirms something that response teams and cybersecurity intelligence feared: the mass of credentials stolen from FortiGat…
The US Agency for Infrastructure and Cybersecurity. US (CISA) has recently included in its catalogue of known and exploited vulnerabilities (KEV) a high-gravity failure affecting …
Argo CD, the most commonly used declarative tool to deploy applications in Kubernetes, drags a critical failure without patch into its component rest that allows to run code witho…
A massive campaign has exploited the legitimate ScreenConnect (ConnectWise Control) remote access tool as a vector to deploy AsyncrAT, a back door that allows remote control, info…
The reappearance of the Ousaban banking trojan - also known as Javali - in campaigns aimed at Windows users in Spain and Portugal confirms that the old financial crime playbook re…
A new critical failure in Progress Kemp LoadMaster, identified as CVE-2026-8037 and with a CVSS score of 9.6, it is being actively attacked shortly after its disclosure: this is w…
Bitdefender's assessment by 2026 confirms something many already suspected: organisations better understand cyber risks, but they do not always know how to turn that understanding…
The big language models are generating a new attack vector that deserves immediate attention: they invent plausible web addresses that do not exist, and the criminals buy them on …
In recent years, media attention to cyberattacks has been concentrated on visible phenomena such as ransomware and mass data leaks, but the real and sustained transformation facin…
