News about applications, operating systems and software development
Two recent campaigns, one directed at Windows teams using the Grandoreiro banking trojan and one directed at Android mobile with the RAT BTMOB, confirm a trend that response teams…
Protecting Active Directory accounts requires more than arbitrary rules on passwords: it requires policies designed for human reality and for current attack techniques. A policy t…
A critical failure in KnowledgeDeliver, a learning management system (LMS), allowed remote attackers to sign and deerialize malicious ViewState payloads and deploy the web shell .…
A supply chain attack that affected Laravel Lang localization packages shows how far attackers can exploit the legitimate functions of development platforms to distribute malware …
A vulnerability of maximum severity has been reported and confirmed as being exploited in real environments in the LiteSpeed User-End plugin for cPanel: CVE-2026-48172(CVSS 10.0).…
Trend Micro corrected a critical vulnerability on its Apex One endpoint protection platform that, although it requires administrative credentials and local access to the on-premis…
Flipper Devices has opened the door to a greater ambition: to transform the idea of gadget penalizing into a small modular and high-performance Linux platform. The Flipper One pro…
A single GitHub workflow token failed in the rotation and opened the door. This is the central conclusion of the incident in Grafana Labs following the recent wave of malicious pa…
GitHub confirmed that it is investigating possible unauthorized access to its internal repositories after the group known as TeamPCP claimed in a cybercriminal forum to have obtai…
