News about data leaks, security gaps and information exposure
The second day of Pwn2Own Berlin 2026 made it clear that business security and artificial intelligence are at the centre of modern risk: 15 unpublished vulnerabilities awarded wit…
Two critical failures reported this month in the visual builder Avada Builder for WordPress put at risk about a million sites: one allows the arbitrary reading of files on the ser…
In recent months, an infostealer campaign called REMUS which, beyond its code, reveals a worrying trend: criminal operations are becoming professional commercial platforms. Techni…
Microsoft has confirmed critical vulnerability in on-premises versions of Exchange Server, registered as CVE-2026-42897 which is being actively exploited in real environments. Thi…
The inclusion by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) of the vulnerability CVE-2026-20182 in its "Known Exploited Vulnerabilities" catalogue requires t…
Cisco has published urgent patches to correct a maximum gravity vulnerability on its Catalyst SD-WAN controller (CVE-2026-20182) that has already been exploited in a limited way i…
A critical memory failure in NGINX, identified as CVE-2026-42945 again shows that even massively deployed software projects can drag historical defects with current impact. Vulner…
In recent weeks it was confirmed that malicious actors began to exploit, within hours, an authentication failure in PraisonAI, an open source framework for multiple agent orchestr…
An anonymous researcher who signs as Chaotic Eclipse / Nightmare -Eclipse has once again shaken the Windows ecosystem with two new zero- days - baptized by him as YellowKey and Gr…
