News about security failures, exploits and vulnerabilities in systems
Cybersecurity researchers have put a serious warning on the table for millions of developers: several popular extensions of Visual Studio Code contain failures that, properly expl…
Microsoft has recognized a Microsoft 365 Copilot failure that, since the end of January, allowed the IA assistant to read and summarize emails marked as confidential, thus avoidin…
A maximum-gravity vulnerability at Dell RecoverPoint for Virtual Machines has been exploited as a zero-day by a China-related cyber-espionage group, identified by Google Mandiant …
A few weeks ago, Notepad + + officials announced a security update designed to close the doors that used advanced attackers to manipulate the program update mechanism and distribu…
The United States Agency for Infrastructure and Cybersecurity (CISA) has just updated its catalogue of known and exploited vulnerabilities (Known Exploited Vulnerabilities, KEV) w…
A Spanish court has issued precautionary measures against two well-known providers of private virtual networks: NordVPN and ProtonVPN. The order forces both services to block acce…
A few months ago, researchers at the Ox Security security firm focused on a problem that should concern anyone who uses Visual Studio Code with many installed extensions: high-gra…
In mid-2024 a silent campaign began that security researchers have now related to a group suspected of being backed by the Chinese state. This actor took advantage of a critical f…
Cybersecurity researchers have turned on an alarm light on a new way in which artificial intelligence assistants can be abused: converting their web navigation or URLs recovery ca…
