News about data leaks, security gaps and information exposure
A new operation directed against the logistics sector uses an Android spyware identified as Corp MDM, which is being distributed through fraudulent pages that imitate Google Play …
Security researchers have detected a campaign that distributes a malware written in Go through Go modules and, for the first time publicly documented, through suppliers published …
A package supply campaign has recently compromised legitimate components used by developers and continuous integration pipelines to distribute a malicious multiplatform tool. The …
The cyber extortion group known as ShinyHunters published this week on the dark network that has violated systems of the U.S. Federal Bureau of Research (FBI) and has obtained dat…
On September 17 WordPress published a patch that fixes a vulnerability in the core - registered as CVE-2026-93485 and baptized by the community as "Commentary 2Shell" - which allo…
LastPass and Delphos Labs researchers have documented a suplanting campaign that offered a false installer of the "LastPass Authenticator" in GitHub. If a victim downloaded and ex…
Security investigators have detailed a new campaign, identified as TASK # STOMP, which uses VBScript and PowerShell to install a backdoor that collects and exfilters business docu…
Three researchers at the Hacktron firm demonstrated that a vulnerability in the processing of images on the OpenAI public forum platform could be chained to a failure in the compa…
A new documented vulnerability has appeared in a CVE and your scanner has detected it with a high-gravity score. This is an objective fact: there is a public entry of the CVE, you…
