News about technology companies and the tech market
A security researcher, RyotaK of GMO Flatt Security, discovered a critical vulnerability in the Anthropic GitHub Action called Claude Code that allowed an attacker to take control…
A new attack on the npm supply chain has again revealed that package repositories and automated CI flows are privileged targets for actors seeking access to credentials and secret…
A thread in clandestine forums that breaks down, in plain language, how to turn the finding of vulnerabilities into a business reveals something more worrying than a new technique…
Cisco published patches for critical vulnerability on its unified communications platform (Cisco Unified Communications Manager) that can allow a remote attacker to rise to root b…
Cybersecurity researchers have identified a large-scale campaign that supplants free software projects and freeware to redirect unanticipated users through a Traffic Distribution …
A Chinese-speaking cybercrime group, traced by researchers like TA4922 has intensified and geographically expanded its activity, now targeting organisations in Germany, Italy, the…
A new method of denial of service baptized by its discoverers as HTTP / 2 Bomb shows that the combination of already known techniques can become vulnerable to modern servers in a …
Cybersecurity researchers have identified a malspam campaign that takes advantage of the reputation of a legitimate domain to get between the user and the attacker's infrastructur…
CISA has included in its catalogue of Known and Exploited Vulnerabilities (KEV) two failures that risk both Android devices and Linux-based infrastructure: an entire overflow in t…
