News about viruses, Ransomware, Trojans and other malicious software
The latest data from the United States Federal Trade Commission (FTC) show an alarming trend: in 2025, supplanting scams - when criminals pose as banks, public administration or l…
The US Agency for Infrastructure and Cybersecurity. USA (CISA) has placed the fault known as CVE-2026-48172 in its catalogue of exploited vulnerabilities (KEV) and has ordered fed…
The recent detection by researchers of a Windows variant of SprySOCKS - a backdoor that until recently was considered unique to Linux - marks a significant leap in the operational…
Fortinet was back in the spotlight after researchers from the Defused firm reported active exploitation of several critical vulnerabilities on his FortiSandbox threat analysis pla…
A North Korean cyberespionage team known as ScarCruft (also referred to as APT37) has been linked to a speed-phishing campaign that suppresses Microsoft account security notificat…
A critical failure in the SpleHelp remote management software (CVE-2026-48558) allows non-authenticated attackers to create technical accounts with high privileges on servers usin…
The chain of failures reported by Obsidian Security against LiteLLM is a hard reminder of how design decisions, absent validations and unique control points can turn a low privile…
An attack on the supply chain that took advantage of the CD credentials of Awesome Motive compromised the scripts distributed by the WordPress OptinMonster, TrustPulse and, at lea…
Varonis Threat Labs researchers demonstrated an exfiltration path that required only a click on a legitimate Microsoft link and that, in power, could have removed mail issues, cal…
