News about data leaks, security gaps and information exposure
The U.S. Department of Justice announced this week the seizure, by court order, of the web pages linked to the DDoS attack service on request known as NightmareStresser. The addre…
Mandiant describes an attack where a malicious actor took control of an active session of an IA-based programming assistant hosted by a software provider as a service, and from th…
Elastic Security Labs researchers have documented a bank malware operation that has not been publicly described so far and that uses a set of tools called KREMLIN. According to th…
Two recent investigations - one from Sysdig and one from Hunt.io - stress that the separation between discovering a vulnerability and exploiting it has been drastically reduced: n…
Cisco warned about a critical vulnerability in AsyncOS for its Secure Email Gateway (SEG) that is already being exploited in real environments. The failure, identified as CVE-2026…
In the first six months of 2026 the risk area has moved faster than ever: 35,853 CVE, a declared increase of 49% over the same period of the previous year, was made public; howeve…
In recent months, security operations in companies have started to receive a new kind of alerts: those generated by the internal use of IA tools and agents. An analysis of approxi…
GitLab has published patches to correct several critical vulnerabilities, including CVE-2026-85706, a directory path failure in the repository's commit API qualified with CVSS 10.…
Anthropic has announced the interruption of a cyber-espionage campaign that, according to the company, was orchestrated by a state actor linked to Russia that they label as GTG-20…
