News about security failures, exploits and vulnerabilities in systems
Public release of a proof-of-concept (PoC) for what is known as DirtyDecrypt - also labelled in some sources such as DirtyCBC - reignites the alarms on a chain of failures in the …
Data from the 2026 Microsoft Vulnerabilities Report they reveal an uncomfortable truth for security equipment: it is not the total volume of CVE that determines the real risk of...
In February 2026 a service emerged that summarizes the evolution of the phishing: EvilTokens. In less than five weeks this phishing- as- service platform committed more than 340 o…
Security researchers have detected a critical fault chain in SEPPMail Secure E-Mail Gateway which, together, allow from reading other people's emails to remote code execution in t…
A new variant of the infostealer known as SHub, baptized as Reaper, shows that attackers continue to adapt their techniques to overcome the safety improvements of macOS: instead o…
The massive deployment of writing assistants with IA, code copies and extensions that summarize meetings has turned a beneficial work practice into a silent risk for many companie…
Filtered copy of malware known as Shai-Hulud He has already jumped from the public repository to real life: security researchers have found malicious packages published in the npm…
When a phishing mail passes the filters because it seems "clean" but a click is enough to cause a serious exposure, the difference between containing the damage and facing a long …
Grafana Labs has confirmed that attackers accessed their GitHub environment and downloaded part of the source code after compromising an access token. Although the company claims …
