News about security failures, exploits and vulnerabilities in systems
In recent weeks, security agencies in several countries have turned on alarms by a phishing campaign aimed at commercial messaging applications such as WhatsApp and Signal. Americ…
Google has presented a new Android procedure for advanced users who want to continue installing apps outside official stores: it is called Advanced Flow and aims to offer a safer …
Oracle has published security updates to correct critical vulnerability that affects two of its identity management and web services products. The failure, identified as CVE-2026-…
The past FBI public notice puts in large letters something many experts were suspicious of: there are phishing campaigns that are taking account of encrypted messaging application…
The software supply chain again demonstrated its fragility when Trivy, the popular open source vulnerability scanner maintained by Aqua Security, suffered a second commitment in a…
Oracle has published an off-schedule patch to correct a critical failure that allows the remote code execution without authentication in two corporate components: Identity Manager…
A serious security failure in Langflow recently put an uncomfortable reality on the table again: open tools for building and orchestrating IA models are now attractive targets for…
The U.S. Infrastructure and Cybersecurity Security Agency (CISA) has ordered federal agencies to urgently address the most serious vulnerability in the Cisco firewall management s…
Google has presented a new route for those who want to install apps outside the Play Store on Android devices: an "advanced flow" that introduces a 24-hour mandatory wait before a…
