News related to computer security, privacy and data protection
The campaign attributed to the Iranian actor known as Nimbus Manticore(also Screening Serpens or UNS1549) represents a worrying evolution in cyberespionage techniques: not only is…
Microsoft has recognized a known problem introduced by the May 2026 KB5087537 security patch that affects Windows Server 2016 equipment and can cause domain driver location (DC) f…
A high-severity security failure that was already patched in Digital Knowledge Knowledge Deliver - a learning management system (LMS) with a wide presence in Japan - was exploited…
Anthropic seems to be about to extend public access to Mythos, his "border" model designed for code reasoning and vulnerability detection tasks, and the news forces us to rethink …
The FBI has issued an alert on Kali365, a phishing-as-a-service (PhaaS) platform that facilitates attackers - even with little experience - to kidnap Microsoft 365 accounts by abu…
A critical failure in Ghost CMS - registered as CVE-2026-26980 and valued with a CVSS 9.4- is being exploited in mass campaigns that insert malicious JavaScript code into legitima…
The research published by Fox-IT on RemotePE, a remote access trojan (RAT) used by the Lazarus group, confirms a critical trend in cyber-threat to finance and cryptomonedas: incre…
A new coordinated operation that researchers have baptized as TrapDoor has exploited the three large package repositories - npm, PyPI and Crates.io - to distribute malware whose m…
A massive campaign is exploiting a critical vulnerability of SQL injection in Ghost CMS (CVE-2026-26980) to steal administrative keys and plant malicious JavaScript in articles, i…
