News about data leaks, security gaps and information exposure
A South Korean security firm, Genians, has published evidence that North Korean cyberespionage group Kimsuky is incorporating artificial intelligence (IA) models and components in…
A large operation of malicious packages has flooded the npm record: about 800 modules - published under names that seem to be generated randomly or type-squatting - contain a char…
Recent incidents affecting water and purification plants in the United States have highlighted a worrying reality:. Public scans by security companies show over 4,100 EtherNet / I…
Microsoft Threat Intelligence has documented a significant evolution in a campaign aimed at macOS that now uses a server gate that classifies visitors before showing them a malici…
On August 4, 2026, a npm poisoning campaign was detected that began with the malicious release keyv @ 6.0.0 and quickly expanded by multiple package names and organizations. It wa…
Security investigators have identified a attack on the supply chain that uses malicious npm packages to target developers using Alibaba ecosystem tools. The technique is not a sin…
The acceleration of artificial intelligence in cybersecurity is no longer a prediction: it is a reality that reconfigures how threats are detected, investigated and responded to. …
On July 27, 2026, the Adform advertising technology company detected that a JavaScript file that serves customers and editors had been altered to function as a malicious tool in t…
The recent reelaboration of the author of the npm package hijacking - which Amazon Threat Intelligence now associates with North Korea - once again puts on the table a known but i…
