News about security failures, exploits and vulnerabilities in systems
CrowdStrike has identified and monitored since March 2026 a criminal group focused on financial theft that operates against financial institutions in Brazil and that the company h…
Google Threat Intelligence Group (GTIG) has documented a quantitative and qualitative leap in the use of artificial intelligence by attackers: it is no longer just a support tool,…
Security researchers have revealed a Chromium-based post-exploitation tool that is hidden as a marker extension and that, once installed, turns Chrome or Edge into a persistent pi…
Between 2 and 5 September a campaign was detected that takes advantage of MikroTik routers with the Secure Shell (SSH) service exposed to the Internet for administrative control w…
A patch-free vulnerability in Magento Open Source and Adobe Commerce is being exploited in active attacks that allow attackers to run code on online store servers without authenti…
Security researchers have documented an active campaign that takes advantage of two critical failures in popular WordPress supplements to upload arbitrary files and run code on vu…
A phishing campaign that uses legitimate remote monitoring and management software (RMM) installers to get unauthorized remote access has turned out to be much wider than it initi…
The US Agency for Infrastructure and Cybersecurity. US (CISA) recently incorporated seven vulnerabilities into its Known Exploited Vulnerabilities (KEV) catalogue, a sign that the…
On Wednesday Google presented Gemini 3.8 Flash Cyber and launched a restricted program, Fairwind, which gives early access to "high-priority defenders" - governments, health provi…
