News about security failures, exploits and vulnerabilities in systems
Security researchers have reported the existence of an adversary-in-the-@-@ middle (AitM) type phishing tool called NovaCookies that acts as a proxy to redirect Microsoft 365 logi…
Cybersecurity researchers have documented a phishing platform as a service aimed at eliminating the protection of Activation Lock from stolen iPhones and iPads, combining forged w…
The United States Agency for Cybersecurity and Infrastructure (CISA) has included in its catalogue Known Exploited Vulnerabilities (KEV) the critical failure traced as CVE-2026-21…
A recent seminar organized by ActiveState and a survey of 300 security and development leaders in companies in different sectors confirms something that many teams already notice …
Cybersecurity researchers have identified two new malware families - called WordlistLoader and SynkLoader - used as intermediate stages to deploy later loads and, according to pub…
The U.S. Department of Justice. United States announced payment of $400 million by TikTok to resolve a 2024 lawsuit that accused the platform - owned by ByteDance - of violating t…
Cybersecurity researchers have found a malicious package campaign in the npm ecosystem that, at first sight, provide calendar and calculation utilities but actually serve as a veh…
Wazuh has integrated artificial intelligence capabilities into its security platform, offering a cloud-managed option - called Wazuh AI Analyst - and also supporting integration o…
Rust's package ecosystem suffered an attempt to compromise the supply chain on 20 August 2026: three malicious versions of popular crates were published and eliminated within hour…
