News about applications, operating systems and software development
Less than a year after the first open-source personal agents appeared, the debate has moved from "if" to "how" to control their presence within corporate networks. Facts confirmed…
A package of npm called tensorlake, an SDK in TypeScript oriented to Tensorlake applications and services, was engaged in a supply chain campaign linked to the attack family known…
Researchers have shown that a malicious spreadsheet can force LibreOffice and Apache OpenOffice to run code controlled by an attacker at the time the file is opened, without showi…
In recent weeks a campaign was registered that took advantage of a security failure in Zimbra Collaboration Suite to run code without authentication, install web shells and, in se…
Apple has published safety patches to correct critical vulnerability in old versions of iOS, iPadOS and macOS that, according to the company, may have been exploited in targeted a…
Elastic Security Labs researchers have documented a bank malware operation that has not been publicly described so far and that uses a set of tools called KREMLIN. According to th…
In the first six months of 2026 the risk area has moved faster than ever: 35,853 CVE, a declared increase of 49% over the same period of the previous year, was made public; howeve…
A patch-free vulnerability in Magento Open Source and Adobe Commerce is being exploited in active attacks that allow attackers to run code on online store servers without authenti…
