News related to computer security, privacy and data protection
The moment a virtual machine, subdomain or port becomes accessible from the Internet, it starts running a cron that does not stop: it is not a metaphor, it is an operational fact.…
A sophisticated scheme discovered by the Atos threat investigation team in March 2026 shows how malicious actors are going on the offensive against high-privilege accounts through…
A critical failure identified as CVE-2026-41940 in cPanel, WHM and the WP Squared solution has been actively exploited in real environments since late February and forces host adm…
Security researchers have revealed a serious vulnerability in the Linux kernel known as Copy Fail (CVE-2026-31431), which allows a local user with no privileges to write four cont…
Google corrected critical vulnerability in Gemini CLI (package npm @ google / gemini-cli) and in the workflow of GitHub Actions google-github-actions / run-gemini-cli that allowed…
A set of official SAP packages published in the npm record was compromised and, according to analysis of several research teams, the intrusion coincides with the tactical-operatio…
A backdoor implanted years ago in the Quick Page / Post Redirect plugin - installed on tens of thousands of WordPress sites - turns an apparently harmless utility into a gateway f…
The Ukrainian police arrested three persons accused of having stripped and marketed more than 610,000 accounts of the Roblox platform in a scheme that, according to the authoritie…
Researchers from several security firms have alerted to a committed supply campaign targeting the SAP JavaScript ecosystem, distributed in legitimate npm packages but versed with …
