News about security failures, exploits and vulnerabilities in systems
Recently, cyber security researchers have alerted about a renewed variant of malware known as SparkCat that has reappeared in official mobile application stores: both in the App S…
A former worker responsible for the central infrastructure of an industrial company based in Somerset County, New Jersey, admitted his guilt after a extortion plan that ended up b…
The recent incident around Claude Code - Anthropic's new tool designed to perform programming tasks directly from the terminal - has not only exposed sensitive code: it also opene…
A massive credentials theft operation has been detected using the vulnerability known as React2Shell as an initial input door to compromise Next.js applications and extract secret…
Cisco has published patches for two critical vulnerabilities that can allow a remote and unauthenticated attacker to take control of equipment if they are successfully exploited. …
The battle between defenders and Internet attackers has long since been a matter of closing ports or keeping patches up to date. Now, a source of problems that is going unnoticed …
In recent years, fraud has ceased to be just a matter of viruses, phishing or network intrusions: it is moving to the real world. Malicious actors have learned to exploit legitima…
Since the end of 2023, researchers at Elastic Security Labs have documented an economically motivated operation that uses false installers to introduce both remote trojan (RAT) an…
This week Cisco has released security updates to correct several critical and high gravity vulnerabilities. Among the most worrying is a failure in the integrated management modul…
