News related to computer security, privacy and data protection
A new method of denial of service baptized by its discoverers as HTTP / 2 Bomb shows that the combination of already known techniques can become vulnerable to modern servers in a …
Cybersecurity researchers have identified a malspam campaign that takes advantage of the reputation of a legitimate domain to get between the user and the attacker's infrastructur…
The assumption is no longer optional: zero failures continue to appear, automation and IA accelerate the creation of exploits and the old mandate of "patching all in time" ceased …
CISA has included in its catalogue of Known and Exploited Vulnerabilities (KEV) two failures that risk both Android devices and Linux-based infrastructure: an entire overflow in t…
A new explosion for Reis, registered as CVE-2026-23479, has replaced the focus on how subtle failures in mature code can become remote execution doors in productive environments. …
In April, a single vulnerability in a remote access service triggered data gaps in more than seventy financial institutions that shared infrastructure with a third supplier; the p…
Organizations have climbed to a point where identity is no longer a single centralized problem: it has been atomized in thousands of applications, local accounts, machine identiti…
Acer has confirmed that he is working on patches for two most serious vulnerabilities that affect his Wave 7 mesh routers with T7c _ GBL _ 1.01.000055 firmware or earlier versions…
Cybersecurity researchers have described a patch-free vulnerability that allows an attacker to cause the filtration of a user's NTLMv2 hash by inducing the opening of manipulated …
