News about security failures, exploits and vulnerabilities in systems
The campaign known as Mini Shai-Hulud, attributed to actor TeamPCP, again highlights the fragility of the open source supply chain: legitimate packages in npm and PyPI used by pro…
Instructure, the company behind the popular Canvas learning management system, confirmed that it reached a "deal" with the ShinyHunters extortion group following a cyber attack th…
The American company Instructure, owner of the Canvas educational platform, has confirmed an agreement with a decentralized extortion group following unauthorized access that affe…
RCS is based on the so-called RCS Universal Profile, a specification promoted by the industry to standardize the capabilities between operators and manufacturers. Coordination bet…
The California Attorney General's Office reached an agreement on $12.75 million with General Motors that marks a turning point in the regulation of vehicle telemetry: state author…
During the weekend Checkmarx confirmed that a malicious version of his Jenkins plugin for Application Security Testing (AST) was published in the Jenkins Market, in addition to a …
The publication of a manipulated version of the Jenkins AST plugin associated with Checkmark once again puts on the table the most dangerous threat of the moment: the abuse of con…
A new threat actor that researchers have baptized as Mr _ Rot13 is exploiting critical vulnerability in cPanel / WHM, identified as CVE-2026-41940, to achieve an authentication by…
Google has revealed a worrying case that marks a turning point: researchers from its threat intelligence team (GTIG) identified a campaign in which an unknown actor exploited a ze…
