News about security failures, exploits and vulnerabilities in systems
A new research work by Jacob Ginesin (PhD in Carnegie Mellon and cryptographic auditor in Cure53) disposes of an extended assumption: that a signed confirmation (commit) in Git is…
Cisco Talos has revealed a significant evolution in the tools of a Chinese actor traced as UAT-7810 whose function seems to be to build and maintain a network of "Operational Rela…
A new failure in the Linux kernel called GhostLock (CVE-2026-43499) has again exposed a pattern that should concern administrators and users: old very used code errors that, redis…
The US Agency for Infrastructure and Cybersecurity. United States. ( CISA) has recently added four critical failures to its catalogue of known and exploited vulnerabilities, a cle…
The malicious operation known as RedWing It represents a dangerous evolution in the mobile cybercrime industry: it is not just another technical Trojan, but a "ready-to-use" produ…
Between late June and the first days of July 2026, ZeroBEC researchers described an active phishing campaign that takes advantage of the legitimate flow of Microsoft 365 device au…
Security researchers have demonstrated a practical way of exfiltering private data from organizations through a new feature of GitHub: agents that run "agenic workflows." The tech…
The security of the software supply chain ceased to be a problem only of libraries and versions long ago; the arrival of artificial intelligence to the development pipeline transf…
A new cyberintrusion campaign aimed at universities in the United States and Canada has exploited critical vulnerabilities in the Roundcube web client for mail, compromising accou…
