News related to computer security, privacy and data protection
A critical failure in the Weaver Eco-cology office automation platform (identified as CVE-2026-22679) has been actively exploited since mid-March to execute discovery commands on …
In recent weeks, a particularly worrying phenomenon has been observed: malicious actors are taking advantage of the legitimate service of Amazon Simple Email Service (SES) as infr…
An active phishing campaign detected since at least April 2025 is exploiting confidence in legitimate remote management tools to achieve and maintain persistent access to corporat…
A legitimate and widely used package in the Python ecosystem, PyTorch Lightning, was manipulated in a malicious publication in PyPI and delivered a credentials charger to browsers…
A new current in closed criminal forums and groups reveals that financial fraud is no longer a set of opportunistic scams to become a replicable and optimized process: the attacke…
In 2025 we saw scenes that previously appeared to be taken from novels or from old hackers' records: adolescents without technical training capable of removing millions of records…
The U.S. agency CISA has confirmed that malicious actors are already exploiting in real environments the failure known as Copy Fail (CVE-2026-31431), just a day after Theori resea…
On May 2, 2026, researchers at Ctrl-Alt-Intel detected an active campaign that explores critical vulnerability in cPanel / WHM, registered as CVE-2026-41940, to unify authenticati…
The recent international raid that evicted nine scam centres linked to investment fraud in cryptomonedas and which led to the arrest of hundreds of suspects is less an isolated fa…
