News related to computer security, privacy and data protection
The United States Agency for Infrastructure and Cybersecurity (CISA) has identified an active operating activity against network infrastructure devices: specifically against Ubiqu…
The 2025 incidents that affected several large UK chains and the recent case of Carnival Corporation recall an uncomfortable truth for corporate cybersecurity: it is not always ne…
We are facing a change of time in cybersecurity: the transition from threats to human rhythm to attacks that occur at the pace of the machine. For years the organizational respons…
Symantec and Zscaler have detected a new back door, baptized as Mistic (or MTLBackdoor) which is being employed in economically motivated intrusions for sectors such as insurance,…
A new risk scenario has emerged for customers of Cisco's unified communications platforms: researchers and malicious actors are exploiting a critical vulnerability identified as C…
A high-gravity SSRF in Cisco Unified Communications Manager (CUCM), identified as CVE-2026-20230, is being actively exploited and represents a direct risk for voice and collaborat…
A Russian-speaking initial access operator, motivated by economic benefit, is behind a massive credentials collection campaign that researchers have baptized as FortiBleed and wou…
A security company, AIR, demonstrated a structural weakness in the "skills" ecosystem for IA agents: it created an apparently harmless skill called brand-landingpage, he uploaded …
Two young people linked to the group known as "Scattered Spider" have changed their judicial strategy and have pleaded guilty for the cyber attack that affected Transport for Lond…
