News about security failures, exploits and vulnerabilities in systems
Microsoft has with high confidence attributed to the operation the recent commitment of the supply chain of Mastra in npm to the North Korean threat known as Sapphire Sleet (BlueN…
A recently parked vulnerability in the Gravity SMTP plugin for WordPress - identified as CVE-2026-4020- has exposed sensitive credentials and configurations in approximately 100,0…
Klue, the market intelligence platform, has confirmed a security incident that ended with the removal of OAuth tokens used to connect integration with Salesforce client environmen…
A information disclosure vulnerability in the WordPress plugin known as Gravity SMTP (registered as CVE-2026-4020) is being actively exploited and affects installations using vers…
On June 18, 2026 a technical research and a concept test was published that changes the picture for several Apple devices: the so-called explosion usbliter8 allows to run arbitrar…
Microsoft researchers have published a technical analysis of an operating chain called AutoJack that turns an IA navigation agent into a remote command execution vector in the hos…
Public alert about the campaign known as FortiBleed remember that the perimeter devices - firewalls and VPN gateways - remain one of the most cost-effective and ignored routes for…
In recent years, many organizations have considered multi-factor authentication (MFA) as the strongest barrier against accountability. However, the attackers have evolved and now …
Salesforce disable the integration of the Klue Battlecards application into its platform after unusual activity was detected that could lead to unauthorized access to customer dat…
