News about security failures, exploits and vulnerabilities in systems
The United States Agency for Infrastructure and Cybersecurity (CISA) has just updated its catalogue of known and exploited vulnerabilities (Known Exploited Vulnerabilities, KEV) w…
A Spanish court has issued precautionary measures against two well-known providers of private virtual networks: NordVPN and ProtonVPN. The order forces both services to block acce…
A few months ago, researchers at the Ox Security security firm focused on a problem that should concern anyone who uses Visual Studio Code with many installed extensions: high-gra…
In mid-2024 a silent campaign began that security researchers have now related to a group suspected of being backed by the Chinese state. This actor took advantage of a critical f…
Cybersecurity researchers have turned on an alarm light on a new way in which artificial intelligence assistants can be abused: converting their web navigation or URLs recovery ca…
The lessons left by the recent hijacking of the Notepad + + update infrastructure can be read in the very solution your development team has deployed: a two-layer verification log…
A few days ago, cyber security researchers uncovered a sophisticated campaign that combines social engineering, supplanting open source projects and malware to achieve high value …
Microsoft's recent research uncovers a subtle and worrying technique: legitimate companies are taking advantage of buttons like "Summarize with AI" to inject hidden instructions i…
The Irish data protection authority has opened a formal investigation into X following the use of Grok, the platform-linked artificial intelligence tool, to generate unconsensual …
