Alessandro Mascellino

Written by Malware used by North Korea's Lazarus group negotiated its command channel using a post-quantum key exchange before pulling down

Written by A previously unseen NFC relay malware family has been deployed alongside a remote access trojan in a single 13-minute phone

Written by A critical-severity VMware vCenter vulnerability has been exploited within five days of disclosure by Broadcom, with attackers deploying an open-source reverse shell to hold access to compromised systems.

Google Cloud has divided its post-quantum migration into interim deadlines, targeting its first major risk domain for completion by the end of 2027.

More than 40,000 WordPress sites have been exposed to an authentication bypass flaw in the User Profile Builder plugin that can let unauthenticated attackers access the site's administrator account.

Written by A vulnerability in UNISOC modem firmware can allow arbitrary code execution with kernel privileges from the modem context, potentially allowing an attacker to modify Android kernel code.

Written by A critical vulnerability in NASA's open-source AMMOS Instrument Toolkit (AIT)-GUI ground software has been found that could allow

Written by Enterprise applications now carry 4.31 times more critical and high-severity vulnerabilities than before the acceleration of AI-driven software development.

Written by The UK National Cyber Security Centre (NCSC) has urged organizations deploying autonomous AI agents to use sandboxing, human

Written by Two vulnerabilities in JFrog Artifactory have been found which allow anonymous or low-privileged users to manipulate package