News about security failures, exploits and vulnerabilities in systems
Security researchers have uncovered three critical failures in mcp-server-git, the official implementation of the Git server for the Model Context Protocol (MCP) maintained within…
People who defend networks and systems face a simple demand in appearance but complex in practice: to detect and neutralize attacks in real time. However, they often do so with to…
In modern companies there is a silent and dangerous layer that rarely appears in the reports: accounts that were left behind when people, services or systems ceased to be part of …
API key and tokens leaks were no longer a rarity. In recent years we have seen how secrets that should remain in closed environments end up circulating in public repositories, con…
This week security researchers have unravel a maldumping campaign that used a fake extension for Chrome and Edge called NexShield as Trojan's horse. A simple view was sold as a li…
In recent weeks, security researchers have had a campaign that combines classic social engineering techniques with an increasingly sophisticated code: a new backdoor named as PDFS…
Cybersecurity researchers have revealed a vulnerability that takes advantage of the conversational nature of language models to convert an apparently harmless functionality into a…
The United Kingdom Government has rekindled the alarms on a persistent pattern of digital attacks that are leaving websites and essential services out of service: Russian-like hac…
A young man from Tennessee pleaded guilty for unauthorised access to systems that should be especially protected: the United States Supreme Court electronic document-filing system…
