News about data leaks, security gaps and information exposure
The recent reelaboration of the author of the npm package hijacking - which Amazon Threat Intelligence now associates with North Korea - once again puts on the table a known but i…
Microsoft has announced the incorporation of a specifically cybersecurity-oriented model within MDASH, its multi-level platform for identifying and relieving vulnerabilities, but …
The maldumping operation nicknamed Source represents an interesting and worrying technical variant: instead of serving a complete malicious executable from a fixed URL, it forces …
A critical failure in the Fastjson library of Alibaba - registered as CVE-2026-16723- re-alert Java developers and security teams: attackers can achieve code execution in packaged…
A high-gravity security failure has been actively exploited on the open source platform for Windmill developers: this is the vulnerability identified as CVE-2026-29059, a classic …
Apple has deployed a correction for a vulnerability in its Hide My Email service that, according to published research, could allow real mail addresses to be revealed through mail…
In June 2026, researchers at Arctic Wolf Labs documented a series of intrusions that had a common point of entry: the exploitation of CVE-2026-0257, an authentication vulnerabilit…
Cybersecurity researchers have identified a massive campaign that takes advantage of GitHub as a distribution platform: almost 7,600 malicious repositories created by about 6,600 …
The recent incident suffered by Hugging Face, where a system of self-employed agents exploited data channelling to scale up position and steal internal credentials, is a wake-up c…
