News about security failures, exploits and vulnerabilities in systems
On May 2, 2026, researchers at Ctrl-Alt-Intel detected an active campaign that explores critical vulnerability in cPanel / WHM, registered as CVE-2026-41940, to unify authenticati…
The recent international raid that evicted nine scam centres linked to investment fraud in cryptomonedas and which led to the arrest of hundreds of suspects is less an isolated fa…
Cybersecurity researchers have identified a massive fraud operation that exploits Mini Apps functionality within Telegram to run critical scams, supplant recognized brands and dis…
The US Agency for Infrastructure and Cybersecurity. United States. ( CISA) has included in its catalog Known Exploited Vulnerabilities (KEV) a critical vulnerability recently disc…
A critical authentication failure in cPanel / WHM, recorded as CVE-2026-41940, is being exploited in mass and has already been linked to ransomware campaigns aimed at Linux server…
A new attack vector known in forums such as ConsentFix v3 is showing a recurring weakness in architectures that trust OAuth flows: it is not always the password or MFA that determ…
The cyber security company Trellix has confirmed an intrusion that allowed unauthorized access to a part of your source code repository and claims to have initiated a forensic inv…
Cybersecurity researchers have highlighted a high-impact computer espionage campaign that, according to the firms that have analysed it, seems to be aligned with Chinese state int…
Microsoft fixed a failure that made the new security notices when opening Remote Desktop files (.rdp) appear wrong in teams with several monitors and different scale settings: dis…
