News about data leaks, security gaps and information exposure
In the last few days, a riot has emerged in the security community when public exploitation code for a privilege climbing vulnerability on Windows has appeared that, so far, has n…
The threat came quickly and urgently: a critical vulnerability in FortiClient Enterprise Management Server (EMS), identified as CVE-2026-35616 It has forced the US authorities to …
Today it is not enough to think about security by operating system. The risk perimeter of an organization extends to Windows, Mac, Linux distributions and mobile devices, and atta…
The German Federal Criminal Police (BKA) has publicly declared what for years was a mystery in cybersecurity circles: the real identity of the main face behind the Ransomware REvi…
In the investigation into the cyber attack that left Drift without $285 million on 1 April 2026, which initially seemed a quick blow has been revealed as the outcome of a social e…
A powerful automated operation is taking advantage of a vulnerability in Next.js applications to start a massive theft of credentials that, according to researchers, has already c…
Recently, security researchers discovered a campaign that introduced malicious packages into the npm record posing as supplements to Strapi, the popular CMS of Node.js. The trap w…
This week the development community of Node.js had to fit in an uncomfortable reminder: the supply chains of the software are as fragile as the people who maintain them. Popular H…
A few years ago the technique known as "device code phishing" was something that was studied in conferences and described in technical papers; today it is already a common tool in…
