News about security failures, exploits and vulnerabilities in systems
This week most of the security news doesn't tell stories of a great spectacular hole, but of many small slices that, together, let an attacker in. Navigators that allow an apparen…
Kaspersky has identified a new tool linked to the APT group known as ToddyCat that puts at risk the confidentiality of corporate mail in Gmail by an unorthodox vector: the capture…
The report of the firm Sysdig on the christened operation JADEPUFFER marks a before and a later but not by technical originality: the relevant thing is that an agent driven by a g…
The recent exposure of the operation known as FortiBleed confirms something that response teams and cybersecurity intelligence feared: the mass of credentials stolen from FortiGat…
The US Agency for Infrastructure and Cybersecurity. US (CISA) has recently included in its catalogue of known and exploited vulnerabilities (KEV) a high-gravity failure affecting …
Argo CD, the most commonly used declarative tool to deploy applications in Kubernetes, drags a critical failure without patch into its component rest that allows to run code witho…
A massive campaign has exploited the legitimate ScreenConnect (ConnectWise Control) remote access tool as a vector to deploy AsyncrAT, a back door that allows remote control, info…
A new critical failure in Progress Kemp LoadMaster, identified as CVE-2026-8037 and with a CVSS score of 9.6, it is being actively attacked shortly after its disclosure: this is w…
In recent years, media attention to cyberattacks has been concentrated on visible phenomena such as ransomware and mass data leaks, but the real and sustained transformation facin…
