Vulnerabilities
CVE-2025-8088 WinRAR and the threat of hidden ADS
In recent months a sad but certain rule of the world of cybersecurity has been reestablished: a single well-used vulnerability can open many doors. The failure known as CVE-2025-8…
Category of intelligence
Vulnerabilities
News about security failures, exploits and vulnerabilities in systems
Vulnerabilities
WhatsApp protects against espionage and presents Strict Account Settings for journalists, activists and public figures
Meta has presented a new security option in WhatsApp for people who, for their work or public visibility, can be the target of sophisticated digital espionage attacks. This is a w…
Vulnerabilities
Nike and World Leaks in the eye of cyberextortion: between a mass leak and possible negotiation
The sports multinational Nike has reported that she is investigating what she calls a " possible cybersecurity incident"after the extortion group known as World Leaks published on…
Vulnerabilities
Reinvented ClickFix: False CAPTCHA, signed App-V and execution in memory of the Amatera stealer
Cybersecurity researchers have brought to light a chain of attack that combines an old acquaintance of web deception - ClickFix-type false CAPTCHAs - with a less expected maneuver…
Vulnerabilities
Ransomware 2.0: The extortion that is no longer only technical, but a crisis of reputation and compliance
For years the approach against the Ransomware was basically technological: strengthening backup, deploying endpoints detection and practicing recovery manuals. However, that parad…
Vulnerabilities
CTEM continuous exposure management that reduces real risk
For years, cybersecurity has ceased to be just a matter of patches and detectors: today the teams want to understand where threats are crossed with real weaknesses within their ow…
Vulnerabilities
Office off-cycle patch fixes CVE-2026-21509: vulnerability that already allowed to avoid COM / OLE protections and facilitate targeted attacks
Microsoft launched an off-cycle patch to correct a high-gravity vulnerability in Microsoft Office that is already being used in targeted attacks. Identified as CVE-2026-21509, the…
Vulnerabilities
PeckBirdy the JScript frame that operates on browsers and opens doors without a trace
Security researchers have identified a command and control framework based on JScript which is being exploited by actors aligned with China since 2023. The central part of this ca…
Vulnerabilities
Stanley the subscription malware that deceives with extensions in the Chrome Web Store
A new subscription malware service has alerted researchers and security officials: under the commercial name of "Stanley," who offers it promises malicious extensions for browsers…