News about security failures, exploits and vulnerabilities in systems
Kaspersky has published an analysis that attributes to the actor known as HoneyMyte (also Mustang Panda) an updated version of the CoolClient backdoor that incorporates a signed k…
The GeoServer open source project has a zero-day vulnerability that is being actively explored by attackers, according to researchers' public alerts and the watchTowr intelligence…
Security researchers have documented a new malware family aimed at macOS - called AmnesiaStealer - that combines a dropper in shell, an infostealer written in Rust and a remote mo…
In recent weeks malicious activity has been detected taking advantage of a critical vulnerability in Microsoft SharePoint registered as CVE-2026-55040(CVSS 9.1), which Microsoft c…
The North Korean group known as Lazarus Group has again shown that it continues to improve intrusion techniques for the defence and aerospace industry. According to the research p…
Security researchers have identified a massive package of browser extensions that were presented as free VPN and proxy solutions, aimed mainly at Russian-speaking users seeking to…
Cisco has confirmed the active exploitation of a high-severity vulnerability in its Secure Firewall Adaptive Security Application (ASA) and Secure Firewall Threat (FTD) firewall s…
Microsoft published in its monthly patch cycle and among the August corrections there is a vulnerability that the company itself points out as actively exploited: CVE-2026-68820. …
OpenAI presented this week GPT-5.6-Cyber, a variant of his family of models explicitly oriented to cybersecurity tasks such as vulnerability research, penetration tests and incide…
