News about security failures, exploits and vulnerabilities in systems
A new wave of cyber-espionage campaigns has been detected throughout 2025, targeting government agencies and law enforcement in South-East Asia. The security firm Check Point has …
A recent Huntress investigation revealed a maneuver that sounds like déjà vu for anyone following security in Windows, but that continues to work in the real world: malicious acto…
In modern architectures, identity no longer lives only in the directories and consoles of IAM. The applications, the APIs, the service accounts and the authentication mechanisms t…
When a security alert appears, it is not always a counter-clock race to win the attacker; often the difference between containing an incident and losing control is in the decision…
In recent months, threat response teams have seen a paradigm shift: campaigns that steal credentials and secrets are no longer an exclusive Windows problem and begin to thrive in …
The Eclipse Foundation has decided to take a significant step to tighten the security of its Open VSX extension repository, the alternative record where accessories compatible wit…
The Step Finance decentralized finance analysis and management platform confirmed at the end of January that it was the victim of an attack that cost it tens of millions in digita…
In the last week, a coordinated recognition campaign was detected that targeted Citrix NetScaler infrastructure (also known as Citrix ADC). According to the analysis published by …
A serious vulnerability that affected Ask Gordon, the artificial intelligence assistant integrated in the Docker Desktop and Docker's CLI. Security investigators named the failure…
