News about security failures, exploits and vulnerabilities in systems
Cybersecurity researchers have brought to light a sophisticated campaign that abuses legitimate sites committed to propagating a remote trojan so far unpublicly documented, named …
PayPal has notified some users that extremely sensitive information was mistakenly accessible in one of its loan applications for several months last year. According to the commun…
Insurers and regulators are turning their eyes to what we might call the "identity position" of companies: how they manage passwords, privileged accounts and authentication mechan…
The FBI's warning is not a science fiction story: last year the attacks known as "jackpotting" - in which criminals force ATMs to spit money using malware - had a worrying upturn.…
ATMs have again been targeted by a massive campaign of digital theft, but this time the weapon is not a skimmer hidden in the card slot but malicious software that forces the mach…
Security researchers have identified what seems to be the first malware family for Android that directly incorporates a generative intelligence model into its running flow. The pi…
A serious failure in Grandstream's VoIP GXP1600 phone series allows an unauthenticated remote attacker to take control of the team with root privileges and listen to calls without…
In recent months, government cybersecurity in the United States has received a strong reminder: vulnerabilities in critical infrastructure products are not a theoretical problem, …
It is not enough to steal a username and a password for a long time: the modern "infostealers" have turned the removal of credentials into a much more complete identity mining. Sp…
