News about security failures, exploits and vulnerabilities in systems
The report of the NASA Office of Inspector General (OIG) on the speed-phishing campaign starring an individual identified as Song Wu shows a classic threat that continues to cause…
More than 10,500 Zimbra instances exposed on the Internet remain vulnerable to active attacks According to the monitoring of the security NGO Shadowserver, and the affected failur…
A recent cyberespionage operation shows how groups with experience in persistence and stealth continue to exploit legitimate applications and public services to avoid detection. A…
Less than 13 hours after becoming public, a high-gravity vulnerability in LMDeploy - the open source toolkit to compress, deploy and serve language and vision models - was already…
A critical vulnerability in the Breeze Cache plugin for WordPress allows attackers to upload arbitrary files to the server without authentication, and is already being exploited i…
A new threat actor identified as UNC6692 has shown a worrying trend: convergence of social engineering through collaborative platforms and systematic abuse of cloud services to di…
A malicious package briefly published on npm compromised the distribution of Bitwarden's CLI and put at risk sensitive credentials from developers and CI / CD systems. Technical s…
A supply chain commitment has hit a tool designed to improve security: Docker images and VS Code / Open VSX extensions from the Checkmarx KICS open scanner were cut to steal secre…
Recent findings on the verification of the official Bitwarden CLI package once again reveal the seriousness of the supply chain attacks: a malicious actor managed to introduce cod…
