News about security failures, exploits and vulnerabilities in systems
A team of researchers has shown how, with nothing but instructions in natural language within a Google Calendar invitation, Gemini - the assistant based on the great Google langua…
In recent years the form of attack has changed: it is no longer so much about "forcing doors" on servers as about taking advantage of valid credentials to enter and move with appa…
Security teams have become the operational heart of modern companies, but they often work with tools that they did not choose and workflows designed for executive presentations ra…
Security researchers have uncovered three critical failures in mcp-server-git, the official implementation of the Git server for the Model Context Protocol (MCP) maintained within…
People who defend networks and systems face a simple demand in appearance but complex in practice: to detect and neutralize attacks in real time. However, they often do so with to…
In modern companies there is a silent and dangerous layer that rarely appears in the reports: accounts that were left behind when people, services or systems ceased to be part of …
API key and tokens leaks were no longer a rarity. In recent years we have seen how secrets that should remain in closed environments end up circulating in public repositories, con…
This week security researchers have unravel a maldumping campaign that used a fake extension for Chrome and Edge called NexShield as Trojan's horse. A simple view was sold as a li…
In recent weeks, security researchers have had a campaign that combines classic social engineering techniques with an increasingly sophisticated code: a new backdoor named as PDFS…
