News about security failures, exploits and vulnerabilities in systems
Cybersecurity researchers have brought to light a chain of attack that combines an old acquaintance of web deception - ClickFix-type false CAPTCHAs - with a less expected maneuver…
For years the approach against the Ransomware was basically technological: strengthening backup, deploying endpoints detection and practicing recovery manuals. However, that parad…
For years, cybersecurity has ceased to be just a matter of patches and detectors: today the teams want to understand where threats are crossed with real weaknesses within their ow…
Microsoft launched an off-cycle patch to correct a high-gravity vulnerability in Microsoft Office that is already being used in targeted attacks. Identified as CVE-2026-21509, the…
Security researchers have identified a command and control framework based on JScript which is being exploited by actors aligned with China since 2023. The central part of this ca…
A new subscription malware service has alerted researchers and security officials: under the commercial name of "Stanley," who offers it promises malicious extensions for browsers…
In recent months, a chain of infection has emerged that combines classical social engineering with increasingly refined techniques to pass unnoticed. The researchers BlackPoint Cy…
Microsoft has published this week off-schedule security updates to correct a high-gravity vulnerability in Microsoft Office that is already being exploited in attacks. The failure…
Cybersecurity researchers have identified an active campaign that is exploiting fiscal fear to infect equipment in India with a backdoor in several phases, apparently for espionag…
