News about security failures, exploits and vulnerabilities in systems
Security investigators have identified a new information thief for macOS baptized as CrashStealer, which stands out for its implementation in native C + + and for techniques that …
An apparently trivial discovery - a public Python server with the list of directories activated and a legible .bash _ history - unravel the curtain over three phishing campaigns a…
The incorporation by the U.S. agency CISA of two maximum-gravity security failures into the Known Exploited Vulnerables (KEV) catalogue redemonstrates the pressure that CMS platfo…
The npm package jscrambler @ 8.14.0 published on July 11, 2026, it contained a malicious pre-installation hook that, with just running npm install, deployed and executed a native …
Zimbra has launched an urgent warning for its customers to apply an update to correct critical vulnerability in the Classic Web Client that could allow arbitrary code execution. T…
Progress Software has ordered its ShareFile customers to turn off Windows servers that run their Storage Zone Controllers (SZC), an instruction that the company justifies by a "cr…
Firm's investigators specializing in firmware security Binarly have discovered six vulnerabilities in U-Boot, the start-up charger that acts as the first code executed on such div…
A wrong mathematical check on XQUIC, the implementation of QUIC and HTTP / 3 promoted by Alibaba, allows a legitimate remote client to cause the server process to be blocked with …
A new vulnerability in the generation of self-custodial wallet recovery phrases, baptized by the Coinspection firm as Ill Bloom, has re-exposed a classic problem: when the softwar…
