News about data leaks, security gaps and information exposure
The coordinated operation announced by CrowdStrike with Google and the Shadowserver Foundation against the GlassWorm campaign brings to the fore a reality that experts have alread…
Microsoft has alerted about an active campaign of cryptojacking that incorporates a worrying news: attackers are taking advantage of interactions with chatbots based on large lang…
A critical failure in KnowledgeDeliver, a learning management system (LMS), allowed remote attackers to sign and deerialize malicious ViewState payloads and deploy the web shell .…
The US Agency for Cybersecurity and Infrastructure. The US (CISA) has imposed a short and rough time: federal agencies must secure their facilities with Drudal against an actively…
The campaign attributed to the Iranian actor known as Nimbus Manticore(also Screening Serpens or UNS1549) represents a worrying evolution in cyberespionage techniques: not only is…
Microsoft has recognized a known problem introduced by the May 2026 KB5087537 security patch that affects Windows Server 2016 equipment and can cause domain driver location (DC) f…
The FBI has issued an alert on Kali365, a phishing-as-a-service (PhaaS) platform that facilitates attackers - even with little experience - to kidnap Microsoft 365 accounts by abu…
A new coordinated operation that researchers have baptized as TrapDoor has exploited the three large package repositories - npm, PyPI and Crates.io - to distribute malware whose m…
GitHub has activated a new npm tool called started publishing which requires manual approval of a maintainer (by double factor challenge) before a published version is visible and…
