News about security failures, exploits and vulnerabilities in systems
Insurers and regulators are turning their eyes to what we might call the "identity position" of companies: how they manage passwords, privileged accounts and authentication mechan…
The FBI's warning is not a science fiction story: last year the attacks known as "jackpotting" - in which criminals force ATMs to spit money using malware - had a worrying upturn.…
ATMs have again been targeted by a massive campaign of digital theft, but this time the weapon is not a skimmer hidden in the card slot but malicious software that forces the mach…
Security researchers have identified what seems to be the first malware family for Android that directly incorporates a generative intelligence model into its running flow. The pi…
A serious failure in Grandstream's VoIP GXP1600 phone series allows an unauthenticated remote attacker to take control of the team with root privileges and listen to calls without…
In recent months, government cybersecurity in the United States has received a strong reminder: vulnerabilities in critical infrastructure products are not a theoretical problem, …
It is not enough to steal a username and a password for a long time: the modern "infostealers" have turned the removal of credentials into a much more complete identity mining. Sp…
The State of Texas has filed a lawsuit against TP-Link Systems that combines misleading advertising charges with national security concerns. According to the complaint, the manufa…
Cybersecurity researchers have detected a new Android Trojan that targets financial operations through remote device control. Known as Massiv, this malicious software is disguised…
