News about security failures, exploits and vulnerabilities in systems
Security researchers have published details of critical vulnerability in Elementor Pro - registered as CVE-2026-32475- that allows an unauthenticated attacker to upload dangerous …
In late 2025, Bitdefender research teams detected a cyber-espionage campaign directed at Central Asian government agencies that analysts have named as SilkParasite. The intrusion …
Microsoft has linked more than thirty web domains to MacSync Stealer, a malicious program focused on macOS that steals information. Microsoft researchers describe a repeated chain…
Varonis Threat Labs has published a research that describes three failures in Microsoft Personal Copilot that, according to the firm, allowed a single click on a specially manipul…
Researchers from Anthropic and the École polytechnique fédérale de Lausanne (EPFL) have published a study - disseminated in preprint on August 10, 2026 - that shows in the laborat…
GitLab published an emergency patch on August 17, 2026 to correct critical vulnerability in its self-hosted software (Community and Enterprise Edition) which, under certain condit…
The incorporation of IA agents into business processes has opened a practical way for production systems and data to be accessible from models: it is called Model Context Protocol…
A critical vulnerability that affects SAP Commerce Cloud, registered as CVE-2026-58231 and with maximum score 10.0 on the CVSS scale, it is being exploited attempts shortly after …
Kaspersky has published an analysis that attributes to the actor known as HoneyMyte (also Mustang Panda) an updated version of the CoolClient backdoor that incorporates a signed k…
