News about security failures, exploits and vulnerabilities in systems
In August 2025 a gap in the software supply chain again showed that the weakest link may be in the developer's workflow. A committed version of the nx package published in npm inc…
The security community recently turned the alarms on again: malicious packages written in Rust have been detected that were coming tocrates.iowith an innocent look and a simple pr…
For more than a year, a Russian-speaking threat actor has run a campaign for human resources departments that combines social engineering with advanced evasion techniques to extra…
Microsoft has published an extended security update for Windows 10 with KB5078885 number that fixes the parcheed vulnerabilities in the March 2026 Patch Tuesday. If your organizat…
The safety of the network is no longer just a matter of blocking ports and filtering traffic: devices that are placed on the perimeter, such as new generation firewalls (NGFW), ha…
Weeks ago, security investigators alerted about a new and active botnet that is transforming domestic routers and other border equipment into proxies at the disposal of criminals.…
Earlier this year, security researchers revealed a set of failures that affected Looker Studio, Google's tool to create reports and panels from various data sources. Tendable bapt…
You can't predict when the next critical vulnerability will appear, but you can decide how much of your infrastructure will be exposed when that happens. Many organizations discov…
Microsoft has decided to change the switch: from the May 2026 security patch, the "hotpatch" updates will be enabled by default on all eligible Windows devices managed by Microsof…
