News about security failures, exploits and vulnerabilities in systems
The past incident in Anthropic - where part of the source code of its programming assistant Claude Code became publicly available - recalls that even the companies most focused on…
In recent weeks, a security researcher got what seemed unlikely: finding failures that allow you to run remote code in two of the most veteran text editors in the free ecosystem, …
A campaign aimed at government agencies in South-East Asia has taken advantage of a serious vulnerability in TrueConf's video conferencing client to turn its update mechanism into…
A team of security researchers has exposed a blind area in Vertex AI of Google Cloud that deserves the immediate attention of any team that is deploying artificial intelligence ag…
An active campaign is using websites that imitate almost nailed to legitimate software brands to catch Chinese-speaking users and deliver a new remote access Trojan called AtlasCr…
During the last few weeks several Microsoft 365 users found themselves with an annoying problem: their classic Outlook client began to close unexpectedly and in many cases offered…
In April 2021, a vulnerability in the code of a small decentralized exchange ended with over $50 million in digital assets disappearing within minutes. Now, almost four years late…
A few weeks ago, the Netherlands Ministry of Finance detected an intrusion into its systems that has forced the temporary disconnection of several internal platforms, including th…
The JavaScript community woke up with news that brings back to the fore a risk that many developers fear: software supply chains. The popular HTTP Axios client, with tens of milli…
