News about security failures, exploits and vulnerabilities in systems
The State of AI Usage 2026 report by LayerX Security again shows something that for many security officials is no longer a surprise, but it is still misunderstood: the risk of bus…
A new group of threats identified by the Wiz firm, which have been baptized as JINX-0164, has exposed a dangerous mix of highly directed social engineering and custom malware for …
A new organized effort to SEO poisoning and manipulation of recommendations from artificial intelligence assistants is being used by malicious actors to distribute cryptominery ma…
The phenomenon known as Shadow AI is not an anomaly: it is the logical consequence of employees who seek to be more productive and find IA-based tools that save them time. When th…
Protecting Active Directory accounts requires more than arbitrary rules on passwords: it requires policies designed for human reality and for current attack techniques. A policy t…
The recent FBI warning about the Silent Ransom Group (SRG) extortion group marks a significant escalation: it is no longer just malicious emails or remote accesses, but a hybrid t…
Cybersecurity researchers have revealed a critical failure in Gitea's container record that allows remote attackers to download images marked as private without credentials. Vulne…
The U.S. cybersecurity agency, CISA, has issued an urgent order that forces federal agencies to correct in four days a critical vulnerability in the LiteSpeed user plugin for cPan…
Microsoft has alerted about an active campaign of cryptojacking that incorporates a worrying news: attackers are taking advantage of interactions with chatbots based on large lang…
