News about security failures, exploits and vulnerabilities in systems
Modern intrusions no longer always look like classic malware with signature and noise: many are disguised as legitimate administrative tasks. Native Windows tools - from PowerShel…
Microsoft has confirmed critical vulnerability in Exchange Server identified as CVE-2026-42897 that allows the execution of code in the browser context through a cross-site scribi…
The inclusion by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) of the vulnerability CVE-2026-20182 in its "Known Exploited Vulnerabilities" catalogue requires t…
An actor who calls himself TeamPCP has put on sale - and threatens to filter if a buyer does not appear - what it ensures is a package of almost 450 repositories belonging to Mist…
A critical failure in the Burst Statistics plugin (CVE-2026-8181) is being exploited to get access with administrator privileges on WordPress, which turns sites that use this plug…
Cisco has confirmed that a critical vulnerability is being exploited in active attacks at Catalyst SD-WAN Controller, registered as CVE-2026-20182 (CVSS 10.0) which allows to skip…
Cisco has published urgent patches to correct a maximum gravity vulnerability on its Catalyst SD-WAN controller (CVE-2026-20182) that has already been exploited in a limited way i…
A critical memory failure in NGINX, identified as CVE-2026-42945 again shows that even massively deployed software projects can drag historical defects with current impact. Vulner…
An actor in line with Belarus known publicly as Ghostwriter - also traced as FrostyNeedbor, PUSHCHA, Storm-0257, TA445, Umbral Bison / RepeatingUmbra, NC1151, among others - has r…
