News about security failures, exploits and vulnerabilities in systems
A new wave of intrusions that has hit public agencies and health centres - especially clinics and emergency hospitals - again shows how attackers mix traditional techniques with m…
A critical vulnerability in the Nginx management web component known as nginx-ui - specifically in its support of the Model Context Protocol (MCP) protocol - is being exploited in…
Ukraine's incident response teams recently identified a new malware family that have baptized as AgingFly, deployed in campaigns directed against local authorities and health cent…
Automation tools that promise to save time and connect apps in seconds are being reused by attackers to put phishing and malware into mail boxes. According to a recent report from…
Security researchers have uncovered a worrying campaign in which a set of programs listed in principle as potentially unwanted software (PUP) not only showed ads: it hid an update…
The US Agency for Infrastructure and Cybersecurity. U.S. (CISA) has alerted government agencies for critical vulnerability on Windows that, if not remedied, allows a local attacke…
A critical vulnerability in nginx- ui - an open-source web interface to manage Nginx - is being actively exploited in nature and forces managers and infrastructure managers to rea…
Microsoft has published this week a package of corrections that corrects a surprising total of 169 security failures in its product catalogue, including at least one vulnerability…
Microsoft has deployed new defenses in Windows aimed at neutralizing a phishing vector that has gained traction in recent years: the Remoto Desktop (.rdp) connection files sent as…
