News about security failures, exploits and vulnerabilities in systems
A new report on the campaigns attributed to North Korean actors (the activity known by firms such as BlueNoroff / ClickFix / ClickFake) reveals a remarkable transformation: it is …
On July 24, a concept test was published that explores a vulnerability in Active Directory Certificate Services (AD CS) - baptized by its discoverers as Certighost- which allows a…
A Russian state-supported espionage group has for months exploited an unknown vulnerability in Zimbra's classic web client to read Western mailboxes without the need for interacti…
Security researchers have revealed critical vulnerability in Anthropic Claude Cowork's desktop version for macOS that allowed an agent to escape from his Linux virtual machine and…
A recent finding in the ecosystem .NET puts on the table a less obvious but more targeted variant of the supply chain attacks: a typosquat package published in NuGet that passes t…
Apple has deployed a correction for a vulnerability in its Hide My Email service that, according to published research, could allow real mail addresses to be revealed through mail…
In June 2026, researchers at Arctic Wolf Labs documented a series of intrusions that had a common point of entry: the exploitation of CVE-2026-0257, an authentication vulnerabilit…
Cybersecurity researchers have identified a massive campaign that takes advantage of GitHub as a distribution platform: almost 7,600 malicious repositories created by about 6,600 …
A joint notice from the Dutch intelligence services has replaced a reality that has been growing for years: Internet-connected surveillance cameras are vectors of practical intell…
