News about security failures, exploits and vulnerabilities in systems
Summary of the incident: GitHub investigates unauthorized access to internal repositories after the actor known as TeamPCP put the alleged source code and internal platform organi…
A critical failure in ChromaDB Python API - the popular vector base used for recovery during LLM inference - allows non-authenticated attackers to run arbitrary code on exposed se…
Microsoft's disclosure of the operation of "malware-signing-as-a-service" known as Fox Temper replaces in the center the most critical vulnerability of the modern software ecosyst…
The FBI warns that fraud using physical kiosks to buy crypto - known as crypto ATMs or Bitcoin ATMs - has left massive losses: according to the agency, U.S. consumers reported mor…
Public release of a proof-of-concept (PoC) for what is known as DirtyDecrypt - also labelled in some sources such as DirtyCBC - reignites the alarms on a chain of failures in the …
Data from the 2026 Microsoft Vulnerabilities Report they reveal an uncomfortable truth for security equipment: it is not the total volume of CVE that determines the real risk of...
In February 2026 a service emerged that summarizes the evolution of the phishing: EvilTokens. In less than five weeks this phishing- as- service platform committed more than 340 o…
Security researchers have detected a critical fault chain in SEPPMail Secure E-Mail Gateway which, together, allow from reading other people's emails to remote code execution in t…
A new variant of the infostealer known as SHub, baptized as Reaper, shows that attackers continue to adapt their techniques to overcome the safety improvements of macOS: instead o…
