News about security failures, exploits and vulnerabilities in systems
In recent years, the computation capacity has increased at a rapid speed: the explosion of artificial intelligence has pushed huge investments in GPUs and specific accelerators, a…
Companies have built increasingly complex identity networks, but governance has not followed the same pace. As organizations and teams grow, identity is dispersed among thousands …
The persistent campaign linked to North Korea that researchers have baptized as Contagious Interview has recently expanded its range of action: it is no longer limited to a single…
In recent weeks, U.S. security and intelligence agencies have opened an alarm that deserves attention: groups linked to Iran are focusing their efforts on operational technology (…
A critical failure in Ninja Forms' premium File Uploads plugin for WordPress is being exploited in practice and can allow attackers to upload arbitrary files without authenticatio…
In recent months, a large-scale cyber-espionage operation has come to light that has taken advantage of domestic routers and small poorly protected offices to "recognize from with…
U.S. security agencies issued an urgent call: a group of Iran-related actors are targeting Rockwell / Allen-Bradley's programmable logical controllers (PLCs) accessible from the I…
A high-gravity vulnerability was recently made public in Docker Engine which, under certain conditions, allows for the avoidance of authorization plugins (AuthZ) and for Docker's …
When we talk about the security of credentials, we tend to look at the spectacular: avoid a leak at a millionaire cost. It is understandable: Report on the cost of IBM 2025 data l…
