News about security failures, exploits and vulnerabilities in systems
The ecosystem of cybercrime advances quickly and a new chapter is written by the marketing of sophisticated techniques to avoid security controls: the phishing- as- a- service kit…
On August 4, 2026, a npm poisoning campaign was detected that began with the malicious release keyv @ 6.0.0 and quickly expanded by multiple package names and organizations. It wa…
Security investigators have identified a attack on the supply chain that uses malicious npm packages to target developers using Alibaba ecosystem tools. The technique is not a sin…
The acceleration of artificial intelligence in cybersecurity is no longer a prediction: it is a reality that reconfigures how threats are detected, investigated and responded to. …
On July 30, an attacker emptied 1,196 Bitcoin addresses in 41 minutes and took 1,082.65 BTC - approximately $70.2 million according to value at that time - after exploiting a weak…
On July 27, 2026, the Adform advertising technology company detected that a JavaScript file that serves customers and editors had been altered to function as a malicious tool in t…
A new front in cyberespionage for public institutions in Central Asia and Syria has been exposed and deserves immediate attention: Kaspersky researchers have described a campaign …
Google has recorded an unprecedented leap in correcting security failures: 1,072 vulnerabilities solved in versions 149 and 150 of Chrome, a figure that exceeds the sum of correct…
A new turn in the campaign known as Contagious Interview, linked to actors with alleged ties to North Korea, shows how social engineering and blockchain technology are being combi…
