News about security failures, exploits and vulnerabilities in systems
An independent research team, Manifold Security, has published a report that describes a class of vulnerability present in various programming assistance tools based on artificial…
In recent days the active exploitation of critical vulnerability in JFrog Artifactory has been confirmed that allows raise privileges to administrative level without prior authent…
Security researchers have detected a campaign that distributes malicious code through 13 packages of Composer themes published in Packagist and directed especially to Vietnamese f…
A sustained campaign of labour fraud linked to North Korea has evolved outside the traditional field of hacking: instead of exploiting network vulnerabilities, operators have gain…
Microsoft has published an analysis of a new variant of "ClickFix" campaigns that researchers have baptized as TerminalFix. According to the company, the attack takes advantage of…
In the latest technical notices published by security teams, multiple critical vulnerabilities were identified in plugins and WordPress themes that, together, open the door to com…
A security investigator has revealed two independent chains that allow remote code execution with root privileges on the Unitree G1 EDU robot. According to the technical disclosur…
OpenAI has published a report that reconstructs how internal experiments with high-capacity research models led to a complex intrusion that affected third parties, including Huggi…
Security researchers have exposed a failure in Amazon Kiro, the integrated development environment (IDE) with IA-driven agent functionalities, which allows the exfiltration of loc…
