News about security failures, exploits and vulnerabilities in systems
From iOS 14, Apple added two simple but very useful visual signals to the state bar: a green point when the camera is in use and an orange point when the microphone is recorded. T…
Amazon Threat Intelligence researchers have documented a campaign that shows cruelly how the combination of traditional techniques and commercial services of artificial generative…
Amazon published a detailed analysis of an unpublished campaign in which a Russian-speaking actor was able to commit more than 600 FortiGate firewalls in 55 countries in just five…
A newly reported critical failure is being actively used by attackers to take control of BeyondTrust's remote access devices, and the consequences are serious: from network recogn…
The United States Government's cybersecurity agency has turned on an alert about a vulnerability that is already being exploited in the field: it is a failure in BeyondTrust's rem…
This week another worrying episode was confirmed in the security of the software supply chain: the Cline CLI programmer help tool, an open source project that integrates artificia…
For years we have repeated a mantra: you have to "move security to the left" and ask developers to assume more security responsibilities while writing and testing code. The idea w…
Cybersecurity researchers have brought to light a sophisticated campaign that abuses legitimate sites committed to propagating a remote trojan so far unpublicly documented, named …
PayPal has notified some users that extremely sensitive information was mistakenly accessible in one of its loan applications for several months last year. According to the commun…
