News about security failures, exploits and vulnerabilities in systems
A new failure in the Linux kernel called GhostLock (CVE-2026-43499) has again exposed a pattern that should concern administrators and users: old very used code errors that, redis…
The US Agency for Infrastructure and Cybersecurity. United States. ( CISA) has recently added four critical failures to its catalogue of known and exploited vulnerabilities, a cle…
The malicious operation known as RedWing It represents a dangerous evolution in the mobile cybercrime industry: it is not just another technical Trojan, but a "ready-to-use" produ…
Between late June and the first days of July 2026, ZeroBEC researchers described an active phishing campaign that takes advantage of the legitimate flow of Microsoft 365 device au…
Security researchers have demonstrated a practical way of exfiltering private data from organizations through a new feature of GitHub: agents that run "agenic workflows." The tech…
The security of the software supply chain ceased to be a problem only of libraries and versions long ago; the arrival of artificial intelligence to the development pipeline transf…
A new cyberintrusion campaign aimed at universities in the United States and Canada has exploited critical vulnerabilities in the Roundcube web client for mail, compromising accou…
Researchers have detected a hidden access mechanism in several versions of the Chinese manufacturer Tenda's router firmware that allows you to avoid the authentication of the web …
BeyondTrust has published patches for several critical vulnerabilities in its Remote Support (RS) and Privileged Remote Access (PRA) products that, in specific scenarios, allow re…
