News related to computer security, privacy and data protection
The Pwn2Own Berlin 2026 competition closed with a clear reminder for security officials: even fully-patched products can be violated by shackles of crashes and sophisticated techn…
A researcher who calls himself Chaotic Eclipse (also known as Nightmare Eclipse) has published in GitHub a concept test explosion called MiniPlasma which, according to your tests …
The recovery and evolution of Tycoon2FA - a phishing kit specialized in avoiding authentication - confirms a dangerous trend: criminal operations not only resist police actions, b…
A newly reported zero-day vulnerability on NGINX Plus and NGINX Open, identified as CVE-2026-42945, is being actively exploited in the real environment just days after its publica…
Grafana has confirmed that an unauthorized actor obtained a token that allowed him to access his environment in GitHub and download part of the company's source code. According to…
A security researcher claims that Microsoft silently solved a critical vulnerability in Azure Backup for AKS after rejecting its report and blocking the issuance of a CVE, leaving…
A critical bug in the Funnel Builder (FunnelKit) plugin for WordPress is being exploited in real environments to inject malicious JavaScript into WooCommerce's payment pages and s…
The transformation of the backdoor known as Kazuar into a modular botnet peer-to-peer by the Russian group known as Secret Blizzard changes the rules of the game for the defenses …
A critical bug in the Funnel Builder (FunnelKit) plugin for WordPress, used to customize WooCommerce payment pages, is being exploited freely to insert malicious JavaScript fragme…
