News about security failures, exploits and vulnerabilities in systems
A recent report by Mandiant, the Google-owned response and intelligence unit, reveals that an unknown actor exploded as zero-day a high severity failure in Cisco Catalyst SD-WAN a…
The case known publicly by the alias "Snoopy" has a double lesson: on the one hand, the criminal consequence for those who monetize accounts; on the other, the technical and human…
The American Agency CISA has ignited an alarm that should be taken seriously: there are active holdings against critical vulnerability in the series-a-IP Lantronix EDS5000 convert…
The United States Agency for Infrastructure and Cybersecurity (CISA) has identified an active operating activity against network infrastructure devices: specifically against Ubiqu…
The 2025 incidents that affected several large UK chains and the recent case of Carnival Corporation recall an uncomfortable truth for corporate cybersecurity: it is not always ne…
Symantec and Zscaler have detected a new back door, baptized as Mistic (or MTLBackdoor) which is being employed in economically motivated intrusions for sectors such as insurance,…
A new risk scenario has emerged for customers of Cisco's unified communications platforms: researchers and malicious actors are exploiting a critical vulnerability identified as C…
A high-gravity SSRF in Cisco Unified Communications Manager (CUCM), identified as CVE-2026-20230, is being actively exploited and represents a direct risk for voice and collaborat…
A Russian-speaking initial access operator, motivated by economic benefit, is behind a massive credentials collection campaign that researchers have baptized as FortiBleed and wou…
