News about security failures, exploits and vulnerabilities in systems
Cisco warned about a critical vulnerability in AsyncOS for its Secure Email Gateway (SEG) that is already being exploited in real environments. The failure, identified as CVE-2026…
In the first six months of 2026 the risk area has moved faster than ever: 35,853 CVE, a declared increase of 49% over the same period of the previous year, was made public; howeve…
Microsoft has published technical analyses on two recent campaigns that combine advanced social engineering and legitimate infrastructure abuse to disappoint companies and take co…
The US Agency for Infrastructure and Cybersecurity. USA (CISA) has included five critical vulnerabilities that affect JFrog Artifactory, ConnectWise ScreenConnect and MikroTik Rou…
Anthropic has announced the interruption of a cyber-espionage campaign that, according to the company, was orchestrated by a state actor linked to Russia that they label as GTG-20…
This week there have been several incidents that, apparently different, share the same structural failure: no sophisticated explosion was needed to enter, enough to find an excess…
The safety manufacturer Check Point published on 9 September patches for two critical vulnerabilities that affect the way their products process VPN certificates. According to the…
A failure in DeepSeek Harness, the open source tool that manages local coding agents, allowed a confined agent to annul its own restrictions and execute commands outside the worki…
Microsoft published an unprecedented package of corrections in its September Patch Tuesday: the company solved 974 vulnerabilities in its own software and, adding 25 third party C…
