News related to computer security, privacy and data protection
Microsoft has brought down a malicious extension operation at Edge's store that deserves a careful reading because it blends advanced evasion techniques with a simple goal: to ste…
A critical failure in the libssh2 client library has again revealed an old recipe for insecurity: an missing check in the package parsing process that allows a malicious SSH serve…
Cybersecurity researchers have unravel a recent campaign that took advantage of malicious packages both in npm and in the Go ecosystem to introduce a Python-based information robb…
Ukrainian and US agencies have exposed a persistent cyber-intrusion campaign aimed at messenger accounts of officials, military, politicians and activists in Ukraine, Europe and t…
OpenAI began a controlled distribution of its new family GPT-5.6 - named Sun, Terra and Luna - in an advance that mixes technical ambition and regulatory caution. Sun appears as t…
The joint FBI and CISA public alert on a phishing campaign for Signal users represents a remarkable evolution of tactics: it is no longer just about stealing verification codes or…
The recent joint update of the FBI and CISA on the phishing campaign against Signal users is not just another variant: it describes a tactic change that dramatically increases the…
The US Agency for Infrastructure and Cybersecurity. US (CISA) has given a clear ultimatum: federal agencies must prioritize two critical vulnerabilities before Sunday, 28 June. Th…
The emergence of SharkLoader, a loader (loader) so far unknown that Cobalt Strike Beacon delivers into committed teams, confirms a trend: attackers are combining proven initial ac…
