News about security failures, exploits and vulnerabilities in systems
For many companies in the middle segment, cybersecurity is similar to an act of constant balance: one must protect an attack surface that grows day by day without turning the oper…
A software we use daily was no longer as harmless as we thought: the Notepad + + update was manipulated to redirect downloads to malicious servers. The team behind the popular tex…
The eScan antivirus update infrastructure, developed by the Indian firm MicroWorld Technologies, was compromised and used to distribute a malicious charger to both corporate and d…
A new security alert shows how fragile the code distribution chain can be: malicious actors managed to manipulate legitimate updates hosted in the Open VSX record to spread a malw…
In the current landscape of cybersecurity there are attacks that prefer subtlety and others that go to the rough: those that take advantage of open configurations and make it fast…
In recent weeks a global scam has emerged that exploits the most basic fear of anyone using copies in the cloud: losing photos, documents and backups. The attackers send emails th…
In recent weeks, a wave of intrusions has emerged that combines the old crafts of telephone deception with very sophisticated phishing tools, and whose aim is not to take a single…
In recent weeks, security investigators have unleashed a digital espionage campaign that directly targets those who document and seek information on abuses in Iran since the end o…
In recent weeks, Google and Mandiant security intelligence teams have detected a wave of targeted attacks that combine social engineering by voice - the call vishing- with suplant…
