News about security failures, exploits and vulnerabilities in systems
A Google security engineer was accused by the Department of Justice of using confidential internal data to obtain more than a million dollars in profits in cryptomoneda-based pred…
A new cycle of intrusions attributed to the North Korean group known as Kimsuky (also Velvet Chollima) again highlights a recurring strategy: the combined use of highly targeted s…
A new cyber-espionage actor that WithSecure researchers have marked as GreyVibe has shown in recent months a disturbing combination: highly polished lures generated with artificia…
A remote access Trojan for Android called BTMOB again shows how the professionalization of cybercrime reduces the technical entry barrier for sophisticated attacks: it is offered …
A critical vulnerability has been disclosed in Gogs, the open source self-hosted Git service, which allows remote code (CERs) execution by authenticated users under relatively sim…
A new attack on endpoints management infrastructure underlines a basic principle of safety: when the tool that should be protected is compromised, the perimeter is blurred. In May…
An argument injection failure in Gogs- the Git self-hosted platform written on Go - allows remote execution of code (CERs) in Internet-accessible instances without an official pat…
A classic security debate has been reopened in recent weeks: Do you need to publish vulnerabilities without warning the supplier? or coordinate disclosure to minimize risk? A rese…
Managed service providers (MSP) face a growing dilemma: they receive a daily avalanche of security alerts, but not all of these signals represent real risks. The real problem is n…
