News about security failures, exploits and vulnerabilities in systems
Today an attack on the Python supply chain was detected that affected the official Telnyx package in the PyPI repository: malicious versions were published and distributed as if t…
A massive campaign has recently come to light that is exploiting the GitHub Discussion section to trick developers and collate them malware under the appearance of Visual Studio C…
The Netherlands National Police (Politie) has confirmed that it was the target of a phishing attack that got access to some of its systems, although for now the entity claims that…
A phishing campaign has recently been detected that puts the accounts of TikTok for Business, and it's not just an attack: those responsible have designed the scam so that the aut…
It has long since exploded kits have ceased to be mere test tools to become sophisticated attack platforms. A recent example is the so-called Coruna framework, which according to …
Online store operators using Magento Open Source and Adobe Commerce version 2 face a real and widespread threat: in recent weeks there has been a massive exploitation of a critica…
Security researchers have identified a clean and effective tactic for phishing campaigns to go unnoticed: to take advantage of code-free application creation platforms, such as Bu…
If it sounds like a science fiction film, it's because the digital crime scene already works with its own writers: a new information thief called Torg Grabber It is showing that a…
Citrix released patches for two security failures that affect its NetScaler ADC and NetScaler Gateway applications. One of them has an important resemblance to the memory-reading …
