News about security failures, exploits and vulnerabilities in systems
In the last few months, a rule that every security officer should have in place has become evident: when a malicious actor combines speed, technical knowledge and access to zero-d…
A maximum-gravity security failure in Flowise, the open-source platform to build flows with IA models, is being actively exploited by attackers, according to the analysis of the V…
The Federal Criminal Investigation Office of Germany (BKA) has identified two Russian citizens as the alleged leaders behind some of the most sound Ransomware operations between 2…
A new vector of attack that researchers at the University of Toronto have baptized as GPUBreach shows that Rowhammer-type vulnerabilities, traditionally associated with CPU DRAM m…
Amidst the escalation of the conflict in the Middle East, a cyber-attack campaign directed at Microsoft 365 environments has brought to the fore organizations in the region. Accor…
In the last few days, a riot has emerged in the security community when public exploitation code for a privilege climbing vulnerability on Windows has appeared that, so far, has n…
In recent months, a recurring and effective tactic of certain state-sponsored groups has again been revealed: to take advantage of legitimate and widely reliable services to camou…
If you have ever used an automated tool to diagnose problems with Outlook, Office or Windows, you are likely to know - or have heard of - the Support and Recovery Assistant. As of…
The threat came quickly and urgently: a critical vulnerability in FortiClient Enterprise Management Server (EMS), identified as CVE-2026-35616 It has forced the US authorities to …
