News about security failures, exploits and vulnerabilities in systems
In 2026 the greatest threat to business security is no longer just a technical explosion: is the human interaction with increasingly convincing messages created by IA. The attacke…
Data loss protection (DLP) has traditionally been seen as an endpoint and network problem: equipment installed agents, file inspection and traffic monitoring seemed sufficient. Ho…
A dozen critical vulnerabilities have replaced the focus on vm2, the Node.js library most used to run unreliable JavaScript code within a "sandbox." The failures allow from escape…
A phishing attack taking advantage of Google-sponsored ads has put in check to WordPress site administrators using ManageWP, the GoDaddy platform to manage multiple facilities fro…
Cybersecurity researchers have identified a new Mirai-derived botnet that is self-called xlabs _ v1 and that takes advantage of services from Android Debug Bridge (ADB) exposed to…
A critical failure in the sandboxing library for Node.js vm2 - registered as CVE-2026-26956- allows malicious code to escape the cage and run arbitrary commands in the host. Vulne…
Cisco has published patches for a vulnerability of denial of service in its network orchestration and control suite that can leave key systems unanswered until they are manually r…
The campaign recently attributed to MuddyWater - also known in literature as Mango Sandstorm, Seedworm or Static Kitten - replaces a dangerous trend on the table: state-backed act…
The classic narrative that puts back-up as the last line of defense in the face of a ransomware attack has become outdated: recent incidents show that attackers do not expect to e…
