News about security failures, exploits and vulnerabilities in systems
In December 2025, npm applied a profound change in its authentication system to reduce the risk of supply chain attacks: it revoked the so-called "classic tokens" and promoted ses…
In recent weeks, the Russian Government has intensified its measures against messaging services beyond its control, and WhatsApp has become one of the most recent goals. The compa…
For decades, direct access .lnk has been part of the Windows ecosystem: they arrived with Windows 95 and since then their binary format has grown in complexity. This complexity is…
The Dutch operator Odido has recognized having suffered a cyber attack that, according to the company, could have compromised the personal data of about 6.2 million customers. The…
Cybersecurity researchers have raised the alarm for a coordinated campaign that is using public package repositories - npm and PyPI - as a vector to engage developers and job cand…
A critical failure in the popular WPvid Backup & Migration plugin for WordPress, present in more than 900,000 sites, allowed an attacker to upload arbitrary files without authenti…
The alarms in the cybersecurity world were recently lit around a critical weakness in Ivanti Endpoint Manager Mobile (EPMM). Researchers of the GreyNoise network intelligence firm…
Apple has published this week a series of updates for iPhone, iPad, Mac, Apple TV, Apple Watch and Vision Pro designed to correct a zero-day vulnerability that, according to the c…
In recent weeks, security researchers have turned on a new alarm: state-backed actors are taking advantage of Google's language model, Gemini, as if it were a Swiss knife to facil…
