News about data leaks, security gaps and information exposure
A critical bug in the Funnel Builder (FunnelKit) plugin for WordPress, used to customize WooCommerce payment pages, is being exploited freely to insert malicious JavaScript fragme…
The recent adaptation of Kazuar by the Russian group Turla shows a deliberate evolution towards a model of modular and peer-to-peer botnet designed for resilience and stealth with…
The second day of Pwn2Own Berlin 2026 made it clear that business security and artificial intelligence are at the centre of modern risk: 15 unpublished vulnerabilities awarded wit…
Two critical failures reported this month in the visual builder Avada Builder for WordPress put at risk about a million sites: one allows the arbitrary reading of files on the ser…
In recent months, an infostealer campaign called REMUS which, beyond its code, reveals a worrying trend: criminal operations are becoming professional commercial platforms. Techni…
Microsoft has confirmed critical vulnerability in on-premises versions of Exchange Server, registered as CVE-2026-42897 which is being actively exploited in real environments. Thi…
The inclusion by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) of the vulnerability CVE-2026-20182 in its "Known Exploited Vulnerabilities" catalogue requires t…
Cisco has published urgent patches to correct a maximum gravity vulnerability on its Catalyst SD-WAN controller (CVE-2026-20182) that has already been exploited in a limited way i…
A critical memory failure in NGINX, identified as CVE-2026-42945 again shows that even massively deployed software projects can drag historical defects with current impact. Vulner…
