News on technological advances, startups and new trends
A new cycle of intrusions attributed to the North Korean group known as Kimsuky (also Velvet Chollima) again highlights a recurring strategy: the combined use of highly targeted s…
Anthropic has announced that it is moving towards a public deployment of its Mythos class models after having postponed its release for security risks for public and private softw…
An argument injection failure in Gogs- the Git self-hosted platform written on Go - allows remote execution of code (CERs) in Internet-accessible instances without an official pat…
A new group of threats identified by the Wiz firm, which have been baptized as JINX-0164, has exposed a dangerous mix of highly directed social engineering and custom malware for …
The coordinated operation announced by CrowdStrike with Google and the Shadowserver Foundation against the GlassWorm campaign brings to the fore a reality that experts have alread…
The US Agency for Cybersecurity and Infrastructure. The US (CISA) has imposed a short and rough time: federal agencies must secure their facilities with Drudal against an actively…
The campaign attributed to the Iranian actor known as Nimbus Manticore(also Screening Serpens or UNS1549) represents a worrying evolution in cyberespionage techniques: not only is…
The FBI has issued an alert on Kali365, a phishing-as-a-service (PhaaS) platform that facilitates attackers - even with little experience - to kidnap Microsoft 365 accounts by abu…
A supply chain attack that affected Laravel Lang localization packages shows how far attackers can exploit the legitimate functions of development platforms to distribute malware …
