News about security failures, exploits and vulnerabilities in systems
A security researcher has published functional operating code for four security failures in the Linux kernel that allow a local user to reach root privileges. The four errors - wi…
Microsoft has published corrections for a maximum gravity security failure in Azure AI Foundry - also known as Microsoft Foundry - which, according to the company, could allow an …
Check Point published an urgent patch for a critical failure in their Security Management Servers and Log Servers that, according to the company, allows a remote attacker without …
Security investigators have identified a chain of attack associated with the online person known as Handala Hack and a set of tools using Telegram as a command and control channel…
A serious vulnerability in the Issabel Framework web framework - identified as CVE-2026-89026- is being actively exploited and allows non-authenticated remote attackers to run com…
Mandiant describes an attack where a malicious actor took control of an active session of an IA-based programming assistant hosted by a software provider as a service, and from th…
Wordfence has warned that attackers are exploiting critical vulnerability in the premium WooCommerce Wholesale Lead Capture, which has over 6,000 active facilities, to upload arbi…
Elastic Security Labs researchers have documented a bank malware operation that has not been publicly described so far and that uses a set of tools called KREMLIN. According to th…
Two recent investigations - one from Sysdig and one from Hunt.io - stress that the separation between discovering a vulnerability and exploiting it has been drastically reduced: n…
