News about security failures, exploits and vulnerabilities in systems
A campaign was recently detected that took advantage of two malicious supplements published in the Visual Studio Code Marketplace and which, together, were installed about 1.5 mil…
The American Agency CISA has included four security failures in its catalogue of known and exploited vulnerabilities (KEV), which is equivalent to an urgent warning: there is evid…
On 22 January 2026, the United States Agency for Infrastructure and Cybersecurity ( CISA) added four critical failures to its catalogue of known and exploited vulnerabilities ( <a...
Federal Justice in South Carolina has confirmed that two Venezuelan citizens who participated in a series of ATM robberies will be deported after their sentences have been served.…
In recent years, many development teams have incorporated artificial intelligence models into their workflow to "accelerate" code writing: what some call colloquially "vibe coding…
Fortinet has recognized that it is investigating a new attack vector that allows SSO authentication to be skipped on devices using FortiCloud, even on devices that had been recent…
A new report by security researchers highlights an increasingly worrying technique: instead of creating own malware, attackers are taking advantage of legitimate remote management…
The scenario described by the response teams and the companies that have investigated the campaign is direct and fast. According to public reports from industry firms, in mid-Janu…
Companies that rely on single-session start-up services (SSO) such as Okta have just received an alert that again shows how creative and dangerous the attackers are when they comb…
