News related to computer security, privacy and data protection
The cyber extortion group known as ShinyHunters published this week on the dark network that has violated systems of the U.S. Federal Bureau of Research (FBI) and has obtained dat…
On July 23, targeted attacks were detected that took advantage of a vulnerability until then unknown in the web service of the Security Management Server of Check Point, according…
In recent weeks, two specific security lessons have emerged: IA agents are not mere determinist applications and traditional visibility on permits is no longer sufficient to estim…
On September 17 WordPress published a patch that fixes a vulnerability in the core - registered as CVE-2026-93485 and baptized by the community as "Commentary 2Shell" - which allo…
LastPass and Delphos Labs researchers have documented a suplanting campaign that offered a false installer of the "LastPass Authenticator" in GitHub. If a victim downloaded and ex…
Security investigators have detailed a new campaign, identified as TASK # STOMP, which uses VBScript and PowerShell to install a backdoor that collects and exfilters business docu…
An intrusion campaign attributed to the North Korean group known as Jade Sleet again exposed how state actors prioritize developers and development environments to gain access to …
Three researchers at the Hacktron firm demonstrated that a vulnerability in the processing of images on the OpenAI public forum platform could be chained to a failure in the compa…
A security researcher has published functional operating code for four security failures in the Linux kernel that allow a local user to reach root privileges. The four errors - wi…
