News about security failures, exploits and vulnerabilities in systems
Two young people linked to the group known as "Scattered Spider" have changed their judicial strategy and have pleaded guilty for the cyber attack that affected Transport for Lond…
GitHub has decided to harden one of the most recurrent routes of attack against the software supply chain: from June 18, 2026 the official action actions / checkout stop accepting…
The window between identifying a vulnerability and its exploitation has been drastically closed. For decades the vulnerability management worked with a temporary mattress that all…
Technology has always extended the distance between decision-makers and executes; now that distance has become mobile. The so-called IA agents are no longer attendees who write a …
The investment in defence layers for e-mail has been massive in the last decade, but the operational reality remains untouched: organizations continue to spend valuable hours deal…
I have not received a specific text as a starting point, but given the frequency and gravity of news about cyber attacks, I think it is useful to provide an updated journalistic a…
A malicious campaign spread by WhatsApp is using camouflaged VBScript files as invoices and financial documents to deliver persistent remote access to Windows equipment: when you …
A sophisticated attack on the MEV bot known as JaredFromSubway left a hole of approximately $15 million after a malicious actor exploited the logic that the bot uses to detect tra…
Socrates has published a report that expands research on the mass campaign known as "FortiBleed," and its most worrying finding is that the attackers did not just collect old cred…
