News about security failures, exploits and vulnerabilities in systems
The maldumping operation nicknamed Source represents an interesting and worrying technical variant: instead of serving a complete malicious executable from a fixed URL, it forces …
A critical failure in the Fastjson library of Alibaba - registered as CVE-2026-16723- re-alert Java developers and security teams: attackers can achieve code execution in packaged…
A new report on the campaigns attributed to North Korean actors (the activity known by firms such as BlueNoroff / ClickFix / ClickFake) reveals a remarkable transformation: it is …
On July 24, a concept test was published that explores a vulnerability in Active Directory Certificate Services (AD CS) - baptized by its discoverers as Certighost- which allows a…
A Russian state-supported espionage group has for months exploited an unknown vulnerability in Zimbra's classic web client to read Western mailboxes without the need for interacti…
Security researchers have revealed critical vulnerability in Anthropic Claude Cowork's desktop version for macOS that allowed an agent to escape from his Linux virtual machine and…
A recent finding in the ecosystem .NET puts on the table a less obvious but more targeted variant of the supply chain attacks: a typosquat package published in NuGet that passes t…
Apple has deployed a correction for a vulnerability in its Hide My Email service that, according to published research, could allow real mail addresses to be revealed through mail…
In June 2026, researchers at Arctic Wolf Labs documented a series of intrusions that had a common point of entry: the exploitation of CVE-2026-0257, an authentication vulnerabilit…
