News about security failures, exploits and vulnerabilities in systems
Botnets don't disappear; they reinvent. In recent weeks, the response and detection teams have refocused on a malicious software piece known as Chaos, but not because it is someth…
The security community has just discovered a critical failure in Apache ActiveMQ Classic that had not been detected for more than a decade and that allows to run remote commands i…
Security researchers have identified a speed-phishing campaign linked to the group known as APT28 (also referred to as Pawn Storm or Forest Blizzard) that is using an undocumented…
In recent years, the computation capacity has increased at a rapid speed: the explosion of artificial intelligence has pushed huge investments in GPUs and specific accelerators, a…
Companies have built increasingly complex identity networks, but governance has not followed the same pace. As organizations and teams grow, identity is dispersed among thousands …
The persistent campaign linked to North Korea that researchers have baptized as Contagious Interview has recently expanded its range of action: it is no longer limited to a single…
In recent weeks, U.S. security and intelligence agencies have opened an alarm that deserves attention: groups linked to Iran are focusing their efforts on operational technology (…
A critical failure in Ninja Forms' premium File Uploads plugin for WordPress is being exploited in practice and can allow attackers to upload arbitrary files without authenticatio…
In recent months, a large-scale cyber-espionage operation has come to light that has taken advantage of domestic routers and small poorly protected offices to "recognize from with…
