News about devices, components and technological equipment
Ivanti Connect Secure (ICS), the VPN / SSL platform widely used for remote access, is being actively exploited in nature by a vulnerability of no authentication that allows remote…
In recent weeks a campaign was registered that took advantage of a security failure in Zimbra Collaboration Suite to run code without authentication, install web shells and, in se…
Wordfence has warned that attackers are exploiting critical vulnerability in the premium WooCommerce Wholesale Lead Capture, which has over 6,000 active facilities, to upload arbi…
Elastic Security Labs researchers have documented a bank malware operation that has not been publicly described so far and that uses a set of tools called KREMLIN. According to th…
Two recent investigations - one from Sysdig and one from Hunt.io - stress that the separation between discovering a vulnerability and exploiting it has been drastically reduced: n…
Cisco warned about a critical vulnerability in AsyncOS for its Secure Email Gateway (SEG) that is already being exploited in real environments. The failure, identified as CVE-2026…
A patch-free vulnerability in Magento Open Source and Adobe Commerce is being exploited in active attacks that allow attackers to run code on online store servers without authenti…
Security researchers have documented an active campaign that takes advantage of two critical failures in popular WordPress supplements to upload arbitrary files and run code on vu…
A fraudulent installer that incorporates the ValleyRAT remote access trojan (also identified as Winos 4.0) has been detected as a signed version of a Chinese wallpaper program, ac…
