News about security failures, exploits and vulnerabilities in systems
The US Agency for Infrastructure and Cybersecurity. United States. ( CISA) has included in its catalog Known Exploited Vulnerabilities (KEV) a critical vulnerability recently disc…
A critical authentication failure in cPanel / WHM, recorded as CVE-2026-41940, is being exploited in mass and has already been linked to ransomware campaigns aimed at Linux server…
A new attack vector known in forums such as ConsentFix v3 is showing a recurring weakness in architectures that trust OAuth flows: it is not always the password or MFA that determ…
The cyber security company Trellix has confirmed an intrusion that allowed unauthorized access to a part of your source code repository and claims to have initiated a forensic inv…
Cybersecurity researchers have highlighted a high-impact computer espionage campaign that, according to the firms that have analysed it, seems to be aligned with Chinese state int…
Microsoft fixed a failure that made the new security notices when opening Remote Desktop files (.rdp) appear wrong in teams with several monitors and different scale settings: dis…
The market for managed security services is in full expansion - it is projected to go from around 38.3 billion dollars in 2025 to over 69 billion dollars in 2030- but this growth …
The Tribunal has imposed four years & apos; imprisonment on two former employees of incident response companies for their participation as a member of the BlackCat Ransomware Grou…
A new delivery of the persistent problem of software supply chains has just hit the Python ecosystem: versions 2.6.2 and 2.6.3 of the Lightning package, published on April 30, 202…
