News about security failures, exploits and vulnerabilities in systems
Cybersecurity researchers have drawn up an increasingly refined operation of scams for users in the Middle East and North Africa, where attackers combine localized social engineer…
The dismantling announced by the FBI with Google and Black Lotus Labs of the phishing operation known as Outsider Enterprise it shows how digital fraud has escalated into an indus…
A former IT employee from the Saydel school district in Des Moines was sentenced to 21 months in prison after admitting to a sustained digital sabotage campaign against his former…
Splunk has published critical patches for a Splunk Enterprise failure that, according to the company and the researchers who analyzed the problem, allows for unauthenticated file …
The technical details Sygnia published about what they called "Operation Highland" are a clear warning: an isolated network can be penetrated and controlled in the long term if th…
The U.S. government order that forced Anthropic to immediately deactivate access to its most advanced models, Claude Fable 5 and Mythos 5, has opened a new phase of the debate on …
The latest wave against the Arch User Repository (AUR) forces us to rethink how we trust community packages: attackers took control of hundreds of "orphan" packages, modified only…
A China-related actor known as Velvet Ant has led persistence to a new level: instead of hiding in new software or own tools, it has modified the programs themselves that decide w…
The attacks on the software supply chain have gained visibility from spectacular episodes: malicious packages in public records, compromised updates or abuse of maintenance accoun…
