News about security failures, exploits and vulnerabilities in systems
A high-gravity SSRF in Cisco Unified Communications Manager (CUCM), identified as CVE-2026-20230, is being actively exploited and represents a direct risk for voice and collaborat…
A Russian-speaking initial access operator, motivated by economic benefit, is behind a massive credentials collection campaign that researchers have baptized as FortiBleed and wou…
Two young people linked to the group known as "Scattered Spider" have changed their judicial strategy and have pleaded guilty for the cyber attack that affected Transport for Lond…
GitHub has decided to harden one of the most recurrent routes of attack against the software supply chain: from June 18, 2026 the official action actions / checkout stop accepting…
The window between identifying a vulnerability and its exploitation has been drastically closed. For decades the vulnerability management worked with a temporary mattress that all…
Technology has always extended the distance between decision-makers and executes; now that distance has become mobile. The so-called IA agents are no longer attendees who write a …
The investment in defence layers for e-mail has been massive in the last decade, but the operational reality remains untouched: organizations continue to spend valuable hours deal…
I have not received a specific text as a starting point, but given the frequency and gravity of news about cyber attacks, I think it is useful to provide an updated journalistic a…
A malicious campaign spread by WhatsApp is using camouflaged VBScript files as invoices and financial documents to deliver persistent remote access to Windows equipment: when you …
