News about security failures, exploits and vulnerabilities in systems
Microsoft has confirmed that two crashes in its anti-malware engine have been actively exploited in real environments: one privilege lifting (CVE-2026-41091) qualified with 7.8 on…
The security community has discovered a deep root vulnerability in the Linux kernel that passed unnoticed for nine years and now receives the label CVE-2026-46333, also known in s…
Microsoft started to deploy patches this week for two zero-day vulnerabilities in its Microsoft Defender components that are already being exploited in practice, and the news shou…
GitHub's confirmation that its internal repositories were compromised by a poisoned version of the Nx Console extension for VS Code is not just another isolated episode of cyber a…
Drucal has published safety updates for a vulnerability qualified as "highly critical" which affects Drumal Core and allows an attacker to achieve arbitrary SQL injection in sites…
The Ukrainian authorities, in coordination with US agents. They have focused on an operation of infostealer which, according to the Ukrainian Cyber Police, was allegedly administe…
Microsoft announced the disarticulation of a "malware-signing-as-a-service" operation that exploited its device signature system to convert malicious code into seemingly legitimat…
A single GitHub workflow token failed in the rotation and opened the door. This is the central conclusion of the incident in Grafana Labs following the recent wave of malicious pa…
The latest observations by cyber security researchers point to a change in worrying tactics of an actor linked to China known as WebWorm: in 2025 it has incorporated back doors th…
