News related to computer security, privacy and data protection
A group linked to China, identified by Google as UNC6508, took advantage of a back door installed on exposed REDCap servers to stay within North American medical, academic and mil…
A critical failure in the SpleHelp remote management software (CVE-2026-48558) allows non-authenticated attackers to create technical accounts with high privileges on servers usin…
The chain of failures reported by Obsidian Security against LiteLLM is a hard reminder of how design decisions, absent validations and unique control points can turn a low privile…
An attack on the supply chain that took advantage of the CD credentials of Awesome Motive compromised the scripts distributed by the WordPress OptinMonster, TrustPulse and, at lea…
The process of employee incorporation is often an anti-time race for IT equipment: equipment to provide, accounts to create, permissions to assign. In this context, it is tempting…
E-mail remains the preferred route by the attackers and, in 2026, techniques have matured to turn many campaigns into real stealth exercises: messages generated by IA, supplanting…
A recent attack converted JavaScript scripts that many WordPress facilities consider to be trusted in a back door: by loading while an administrator was authenticated, the malicio…
Cybersecurity researchers have drawn up an increasingly refined operation of scams for users in the Middle East and North Africa, where attackers combine localized social engineer…
The dismantling announced by the FBI with Google and Black Lotus Labs of the phishing operation known as Outsider Enterprise it shows how digital fraud has escalated into an indus…
