News related to computer security, privacy and data protection
Cybersecurity researchers have revealed a critical failure in Gitea's container record that allows remote attackers to download images marked as private without credentials. Vulne…
The U.S. cybersecurity agency, CISA, has issued an urgent order that forces federal agencies to correct in four days a critical vulnerability in the LiteSpeed user plugin for cPan…
Microsoft has alerted about an active campaign of cryptojacking that incorporates a worrying news: attackers are taking advantage of interactions with chatbots based on large lang…
A critical failure in KnowledgeDeliver, a learning management system (LMS), allowed remote attackers to sign and deerialize malicious ViewState payloads and deploy the web shell .…
A new episode of cyberespionage attributed to the Iranian group known as MuddyWater reveals a more refined and stealth campaign that has affected at least nine organizations on fo…
The recent integration between Varonis Atlas and the Claude Compliance API Anthropic represents a practical step towards the governance of IA in business environments: it is not j…
The combination of artificial intelligence tools and offensive techniques is changing the cybersecurity landscape: what previously required weeks of recognition can now be automat…
The Indian incident response agency, CERT-In, has shaken the security team calendar with a practical requirement: critical vulnerabilities that expose Internet services must be pa…
The US Agency for Cybersecurity and Infrastructure. The US (CISA) has imposed a short and rough time: federal agencies must secure their facilities with Drudal against an actively…
