News about viruses, Ransomware, Trojans and other malicious software
A serious vulnerability in the Issabel Framework web framework - identified as CVE-2026-89026- is being actively exploited and allows non-authenticated remote attackers to run com…
Wordfence has warned that attackers are exploiting critical vulnerability in the premium WooCommerce Wholesale Lead Capture, which has over 6,000 active facilities, to upload arbi…
Elastic Security Labs researchers have documented a bank malware operation that has not been publicly described so far and that uses a set of tools called KREMLIN. According to th…
In the first six months of 2026 the risk area has moved faster than ever: 35,853 CVE, a declared increase of 49% over the same period of the previous year, was made public; howeve…
The US Agency for Infrastructure and Cybersecurity. USA (CISA) has included five critical vulnerabilities that affect JFrog Artifactory, ConnectWise ScreenConnect and MikroTik Rou…
GitLab has published patches to correct several critical vulnerabilities, including CVE-2026-85706, a directory path failure in the repository's commit API qualified with CVSS 10.…
Anthropic has announced the interruption of a cyber-espionage campaign that, according to the company, was orchestrated by a state actor linked to Russia that they label as GTG-20…
This week there have been several incidents that, apparently different, share the same structural failure: no sophisticated explosion was needed to enter, enough to find an excess…
The United States Department of Justice (DoJ) and the Office of Foreign Treasury Assets Control (OFAC) conducted a coordinated action against a network operating a digital illicit…
