News about security failures, exploits and vulnerabilities in systems
The recent intrusion that affected several plugins Pro of the developer ShapedPlugin illustrates with crudely the risk most feared by the WordPress community: a commitment of the …
Security researchers have identified a chain of failures in Dify, an open-source platform for agent workflows and more than 146,000 stars in GitHub, which allowed for silently exf…
A heap overreadture failure in the Squid proxy - nicknamed Squidbleed (CVE-2026-47729) - can filter to an attacker clear text information from the HTTP requests of other users of …
The adoption of IA agents in companies is accelerated and, while teams invest in protection against model poisoning, injection of prompts or data leakage, there is a structural bl…
On June 15, a written version of a court decision was published that reveals that the Canadian Intelligence Service (CSIS) obtained permission to remotely enter servers, domestic …
A recent report by INTERPOL describes a significant leap in cybercriminal activity in Asia and the South Pacific, driven by accelerated digital adoption, increased Internet access…
Researchers from the firm Qianxin XLab have identified a new botnet, baptized as AryStinger which has already taken over 4,000 obsolete routers to use them as proxys and remote ag…
Microsoft has with high confidence attributed to the operation the recent commitment of the supply chain of Mastra in npm to the North Korean threat known as Sapphire Sleet (BlueN…
A recently parked vulnerability in the Gravity SMTP plugin for WordPress - identified as CVE-2026-4020- has exposed sensitive credentials and configurations in approximately 100,0…
