News about security failures, exploits and vulnerabilities in systems
Microsoft has brought down a malicious extension operation at Edge's store that deserves a careful reading because it blends advanced evasion techniques with a simple goal: to ste…
A critical failure in the libssh2 client library has again revealed an old recipe for insecurity: an missing check in the package parsing process that allows a malicious SSH serve…
Ukrainian and US agencies have exposed a persistent cyber-intrusion campaign aimed at messenger accounts of officials, military, politicians and activists in Ukraine, Europe and t…
Researchers of the 0DIN team from Mozilla have demonstrated an attack vector that turns an apparently harmless task - clone and run a GitHub repository using an agentic encoding t…
OpenAI began a controlled distribution of its new family GPT-5.6 - named Sun, Terra and Luna - in an advance that mixes technical ambition and regulatory caution. Sun appears as t…
The joint FBI and CISA public alert on a phishing campaign for Signal users represents a remarkable evolution of tactics: it is no longer just about stealing verification codes or…
The recent joint update of the FBI and CISA on the phishing campaign against Signal users is not just another variant: it describes a tactic change that dramatically increases the…
The US Agency for Infrastructure and Cybersecurity. US (CISA) has given a clear ultimatum: federal agencies must prioritize two critical vulnerabilities before Sunday, 28 June. Th…
On June 16, the vulnerability CVE-2026-46331 - nicknamed "Pit COW" - was assigned that allows an unprivileged local user to climb to root in kernel Vulnerable Linux using off-limi…
