News about security failures, exploits and vulnerabilities in systems
The incorporation by the U.S. agency CISA of two maximum-gravity security failures into the Known Exploited Vulnerables (KEV) catalogue redemonstrates the pressure that CMS platfo…
The npm package jscrambler @ 8.14.0 published on July 11, 2026, it contained a malicious pre-installation hook that, with just running npm install, deployed and executed a native …
Zimbra has launched an urgent warning for its customers to apply an update to correct critical vulnerability in the Classic Web Client that could allow arbitrary code execution. T…
Progress Software has ordered its ShareFile customers to turn off Windows servers that run their Storage Zone Controllers (SZC), an instruction that the company justifies by a "cr…
Firm's investigators specializing in firmware security Binarly have discovered six vulnerabilities in U-Boot, the start-up charger that acts as the first code executed on such div…
A wrong mathematical check on XQUIC, the implementation of QUIC and HTTP / 3 promoted by Alibaba, allows a legitimate remote client to cause the server process to be blocked with …
A new vulnerability in the generation of self-custodial wallet recovery phrases, baptized by the Coinspection firm as Ill Bloom, has re-exposed a classic problem: when the softwar…
Microsoft and Binary Defense have described a destructive implant for Windows that, more than a single program, is a malicious toolbox: GigaWiper(also identified as BLUERABBIT in …
The most frequent cyberincident stories do not need any unpublished film tricks or exploits: they start as administrative work. A link that someone clears without thinking, a tool…
