News about viruses, Ransomware, Trojans and other malicious software
On August 4, 2026, a npm poisoning campaign was detected that began with the malicious release keyv @ 6.0.0 and quickly expanded by multiple package names and organizations. It wa…
Security investigators have identified a attack on the supply chain that uses malicious npm packages to target developers using Alibaba ecosystem tools. The technique is not a sin…
The acceleration of artificial intelligence in cybersecurity is no longer a prediction: it is a reality that reconfigures how threats are detected, investigated and responded to. …
On July 27, 2026, the Adform advertising technology company detected that a JavaScript file that serves customers and editors had been altered to function as a malicious tool in t…
Google has recorded an unprecedented leap in correcting security failures: 1,072 vulnerabilities solved in versions 149 and 150 of Chrome, a figure that exceeds the sum of correct…
A new turn in the campaign known as Contagious Interview, linked to actors with alleged ties to North Korea, shows how social engineering and blockchain technology are being combi…
A Wiz research team discovered and reported a chain of exploitation in Azure Cosmos DB, which, according to its public report, allowed to escape from the Gremlin engine sandbox an…
n8n has released patches for an expression sandbox escape vulnerability that allows an authenticated workflow editor to run operating system commands on the server that houses the…
A critical failure in the Fastjson library of Alibaba - registered as CVE-2026-16723- re-alert Java developers and security teams: attackers can achieve code execution in packaged…
