News about security failures, exploits and vulnerabilities in systems
The Substack newsletters platform has started to warn users about an intrusion into their systems which, according to the company, allowed a third party access to limited data in …
In recent weeks we have seen a persistent and relatively discreet actor in Iranian cyberspace, known as Indy (also referred to as Prince of Persia), change his way of operating to…
Cybersecurity researchers have brought to light an active campaign that manipulates NGINX facilities and management panels such as Baota (BT) to divert legitimate web traffic to i…
If you use NGINX to serve sites, do load balancing or as a proxy inverse, pay attention: a campaign has recently been detected in which a malicious actor commits NGINX servers and…
If you manage automation with n8n - the open source platform that allows you to channel applications and processes through workflows - you should pay attention: several recent inv…
Microsoft has presented a light tool to identify hidden back doors in open source language models, a growing concern in the world of artificial intelligence. In simple terms, a ba…
This week the security community again received an alarm signal: the U.S. Cybersecurity Agency ( CISA confirmed) that ransomware bands have started to exploit a high severity vuln…
A new malware operation has again shown how attackers combine technical ingenuity with the abuse of legitimate system functions to go unnoticed. Securonix researchers have describ…
The United States Agency for Infrastructure and Cybersecurity (CISA) has given an ultimatum: federal agencies must park their GitLab instances for a vulnerability that was correct…
