News about security failures, exploits and vulnerabilities in systems
A sophisticated attack on the MEV bot known as JaredFromSubway left a hole of approximately $15 million after a malicious actor exploited the logic that the bot uses to detect tra…
Socrates has published a report that expands research on the mass campaign known as "FortiBleed," and its most worrying finding is that the attackers did not just collect old cred…
The recent intrusion that affected several plugins Pro of the developer ShapedPlugin illustrates with crudely the risk most feared by the WordPress community: a commitment of the …
Security researchers have identified a chain of failures in Dify, an open-source platform for agent workflows and more than 146,000 stars in GitHub, which allowed for silently exf…
A heap overreadture failure in the Squid proxy - nicknamed Squidbleed (CVE-2026-47729) - can filter to an attacker clear text information from the HTTP requests of other users of …
The adoption of IA agents in companies is accelerated and, while teams invest in protection against model poisoning, injection of prompts or data leakage, there is a structural bl…
On June 15, a written version of a court decision was published that reveals that the Canadian Intelligence Service (CSIS) obtained permission to remotely enter servers, domestic …
A recent report by INTERPOL describes a significant leap in cybercriminal activity in Asia and the South Pacific, driven by accelerated digital adoption, increased Internet access…
Researchers from the firm Qianxin XLab have identified a new botnet, baptized as AryStinger which has already taken over 4,000 obsolete routers to use them as proxys and remote ag…
