News about data leaks, security gaps and information exposure
The JavaScript community woke up with news that brings back to the fore a risk that many developers fear: software supply chains. The popular HTTP Axios client, with tens of milli…
In recent months a campaign has emerged that combines ingenious social engineering with advanced stealth techniques to spread a new malware charger named DeepLoad. What makes it p…
When the alarm jumps on a SOC, it is easy to blame the attack itself: sophisticated malware, the well-mounted phishing chain, the campaign that takes advantage of zero-day vulnera…
The market for the so-called Agenic SOC - or IA agents for security operations centres - is in the middle of a boil. Over the past 18 months, dozens of initiatives have emerged th…
The phenomenon known as "secrets sprawl" not only continues, but in 2025 it accelerated at a rate that surprised many security teams. A large-scale analysis of public repositories…
The security community is on the alert after confirmation of the active exploitation of critical vulnerability on the endpoints management platform of Fortinet, FortiClient EMS. I…
Security researchers have documented a new campaign for macOS users that combines convincing social engineering with a packaging technique that complicates forensic analysis. The …
Today an attack on the Python supply chain was detected that affected the official Telnyx package in the PyPI repository: malicious versions were published and distributed as if t…
A massive campaign has recently come to light that is exploiting the GitHub Discussion section to trick developers and collate them malware under the appearance of Visual Studio C…
