News about security failures, exploits and vulnerabilities in systems
Weeks ago, security investigators alerted about a new and active botnet that is transforming domestic routers and other border equipment into proxies at the disposal of criminals.…
Earlier this year, security researchers revealed a set of failures that affected Looker Studio, Google's tool to create reports and panels from various data sources. Tendable bapt…
You can't predict when the next critical vulnerability will appear, but you can decide how much of your infrastructure will be exposed when that happens. Many organizations discov…
Microsoft has decided to change the switch: from the May 2026 security patch, the "hotpatch" updates will be enabled by default on all eligible Windows devices managed by Microsof…
Salesforce recently warned about an increase in malicious activity that targets public sites built with Experience Cloud. The technique described does not exploit a service failur…
The US cyber security agency CISA turned the alarms on again this week by including three serious failures in its catalogue of Known Exploited Vulnerabilities (KEV), a record that…
A recent campaign shows that attackers no longer need to exploit software vulnerabilities to enter corporate networks: it is enough to deceive people. Researchers from the BlueVoy…
A sophisticated attack directed at a cryptomoneda ecosystem company has again highlighted how an intrusion that begins in a developer's personal device can end up emptying portfol…
Password reviews are part of the security ritual in many organizations: they serve to demonstrate compliance, reduce obvious risks and show that basic controls exist. However, too…
