News about data leaks, security gaps and information exposure
A new attack on the npm supply chain has again revealed that package repositories and automated CI flows are privileged targets for actors seeking access to credentials and secret…
Cybersecurity researchers have identified a large-scale campaign that supplants free software projects and freeware to redirect unanticipated users through a Traffic Distribution …
The U.S. Cybersecurity and Infrastructure Agency (CISA) has included in its catalogue of known and exploited vulnerabilities (KEV) a critical failure in the Mirasvit Cache Warmer …
The international operation announced by the U.S. Department of Justice. The US is a milestone in the coordinated response against networks that combine cyber fraud, investment sc…
The assumption is no longer optional: zero failures continue to appear, automation and IA accelerate the creation of exploits and the old mandate of "patching all in time" ceased …
In April, a single vulnerability in a remote access service triggered data gaps in more than seventy financial institutions that shared infrastructure with a third supplier; the p…
Organizations have climbed to a point where identity is no longer a single centralized problem: it has been atomized in thousands of applications, local accounts, machine identiti…
Security researchers have detected a recent campaign using YouTube and SEO techniques to distribute malware to Minecraft players, a trend that deserves attention from both parents…
The US Agency for Infrastructure and Cybersecurity. US (CISA) has given a clear and urgent order: federal agencies must secure their systems against a critical failure in Oracle W…
