News about security failures, exploits and vulnerabilities in systems
A critical vulnerability in nginx- ui - an open-source web interface to manage Nginx - is being actively exploited in nature and forces managers and infrastructure managers to rea…
Microsoft has published this week a package of corrections that corrects a surprising total of 169 security failures in its product catalogue, including at least one vulnerability…
Microsoft has deployed new defenses in Windows aimed at neutralizing a phishing vector that has gained traction in recent years: the Remoto Desktop (.rdp) connection files sent as…
Kraken announced that he is being targeted by a extortion in which a group of cybercriminals threaten to post videos showing access to internal systems containing customer informa…
Microsoft has published the extended security update KB5082200 for Windows 10, corresponding to the April 2026 Patch Tuesday. This is mainly a package aimed at resolving vulnerabi…
Composer, the most used package management tool in the PHP ecosystem, has published corrections for two serious security failures that, successfully exploited, would allow the exe…
Google has taken a remarkable step in protecting its Pixel phones by integrating a DNS analyzer written in Rust into the modem firmware. This is a decision that not only reduces s…
The stolen credentials remain one of the most commonly used doors by the attackers to enter corporate networks: according to Verizon's latest report, they represent a significant …
In recent weeks an Android malicious actor has emerged that brings together classic remote access Trojan (RAT) capabilities with a disturbing turn: in addition to taking control o…
