News about security failures, exploits and vulnerabilities in systems
U.S. security agencies issued an urgent call: a group of Iran-related actors are targeting Rockwell / Allen-Bradley's programmable logical controllers (PLCs) accessible from the I…
A high-gravity vulnerability was recently made public in Docker Engine which, under certain conditions, allows for the avoidance of authorization plugins (AuthZ) and for Docker's …
When we talk about the security of credentials, we tend to look at the spectacular: avoid a leak at a millionaire cost. It is understandable: Report on the cost of IBM 2025 data l…
In recent months the security community has turned its eyes to an old acquaintance: the RowHammer. What until recently seemed to be a major memory problem (DRAM) has now made a di…
In the last few months, a rule that every security officer should have in place has become evident: when a malicious actor combines speed, technical knowledge and access to zero-d…
A maximum-gravity security failure in Flowise, the open-source platform to build flows with IA models, is being actively exploited by attackers, according to the analysis of the V…
The Federal Criminal Investigation Office of Germany (BKA) has identified two Russian citizens as the alleged leaders behind some of the most sound Ransomware operations between 2…
A new vector of attack that researchers at the University of Toronto have baptized as GPUBreach shows that Rowhammer-type vulnerabilities, traditionally associated with CPU DRAM m…
Amidst the escalation of the conflict in the Middle East, a cyber-attack campaign directed at Microsoft 365 environments has brought to the fore organizations in the region. Accor…
