News about security failures, exploits and vulnerabilities in systems
Earlier this month there was an incident that reremembers how fragile the software supply chain can be when a critical component - updates - ceases to be safe. The company behind …
The security community has identified a campaign that took advantage of Moltbot's popularity to distribute malware through a fraudulent extension in the Visual Studio Code Marketi…
A couple of newly discovered safety failures on the N8n workflow automation platform can allow an attacker to take full control of vulnerable instances, obtain confidential data a…
At the end of December 2025, a malicious operation was detected, which, while not causing massive supply cuts, left a worrying mark on the evolution of industrial cybersecurity: m…
Security researchers have identified two serious failures in the N8n flow automation platform that allow remote code execution in vulnerable instances. The weaknesses were detecte…
In recent weeks, the security of large-scale language models (LLM) has ceased to be a theoretical concern to become a real and lucrative target for organized crime. Researchers wh…
When in security you talk about risk by credentials, the conversation usually focuses on striking techniques such as phishing, malware or ransomware. They are real and constantly …
Fortinet has started publishing patches to correct critical vulnerability in FortiOS that is already being exploited in real environments. Identified as CVE-2026-24858 and with a …
The Chinese-related threat family known as Mustang Panda has reupdated its arsenal: Kaspersky researchers have identified a new backdoor variant known as CoolClient that incorpora…
