News about security failures, exploits and vulnerabilities in systems
The software supply chain again demonstrated its fragility when Trivy, the popular open source vulnerability scanner maintained by Aqua Security, suffered a second commitment in a…
Oracle has published an off-schedule patch to correct a critical failure that allows the remote code execution without authentication in two corporate components: Identity Manager…
A serious security failure in Langflow recently put an uncomfortable reality on the table again: open tools for building and orchestrating IA models are now attractive targets for…
The U.S. Infrastructure and Cybersecurity Security Agency (CISA) has ordered federal agencies to urgently address the most serious vulnerability in the Cisco firewall management s…
Google has presented a new route for those who want to install apps outside the Play Store on Android devices: an "advanced flow" that introduces a 24-hour mandatory wait before a…
The case of Cameron Curry, a data analyst hired by a Washington D.C.-based technology company, highlights several of the vulnerabilities that are no longer only theoretical: the r…
Recently, a new analysis of the phenomenon known as "EDR Killers" once again put on the table a technique that has long been exploiting in ransomware intrusions: many of these pro…
In early March, the Bitrefill cryptomoneda gift card sale platform was attacked by some of its operations and which the company itself relates to the North Korean group known as B…
The computer security world looks back at Zimbra's mail servers after researchers and government agencies detected active exploits taking advantage of a serious failure in Zimbra …
