News about security failures, exploits and vulnerabilities in systems
Since the candidate version of Tahoe 26.4 macos began to circulate, several users have noticed a subtle but relevant change in the way the system treats the commands glued to Term…
When the alarm jumps on a SOC, it is easy to blame the attack itself: sophisticated malware, the well-mounted phishing chain, the campaign that takes advantage of zero-day vulnera…
The phenomenon known as "secrets sprawl" not only continues, but in 2025 it accelerated at a rate that surprised many security teams. A large-scale analysis of public repositories…
F5 Networks has changed the gravity of a vulnerability in BIG-IP APM: what was originally considered a failure that could lead to service denials has now been reclassified as a cr…
Security researchers have dug up a Russian-origin remote access tool that is distributed through malicious (.LNK) Windows shortcuts camouflaged as folders containing private keys.…
The recent security research published by Palo Alto Networks Unit 42 describes a sophisticated and sustained campaign directed against a government institution in South-East Asia,…
The security community is on the alert after confirmation of the active exploitation of critical vulnerability on the endpoints management platform of Fortinet, FortiClient EMS. I…
A group known as Handala - linked by several analysts with activities in support of Iran - recently published material that, according to them, comes from the personal mail of the…
A security failure in Smart Slider 3, one of the most popular WordPress plugins to create leaders and carousel, has put hundreds of thousands of sites at risk. Vulnerability allow…
