news · 4 min
Barracuda ESG compromised for 7 months by UNC4841, Microsoft Build sells Copilot for everything, Operation Triangulation reveals an iOS implant. May brings geopolitics in the background and AI security turns into product marketing.
· Manuel López Pérez
news · 7 min
Markdown exfil moves out of the forum and into serious advisories. MSI Gaming leaks Intel Boot Guard signing keys. QueueJumper in MSMQ. Anthropic opens the Claude API. Meanwhile, Cl0p keeps adding victims.
· Manuel López Pérez
news · 4 min
Outlook NTLM zero-click patched after a year of APT28 exploitation, 3CX supply-chain compromise with Lazarus DLL sideloading, GPT-4 released and broken within 24 hours. March closes Q1 with two long stories.
· Manuel López Pérez
news · 5 min
Sydney leaked, Greshake formalises indirect prompt injection, Cl0p turns GoAnywhere into a global campaign, and ESXiArgs sweeps unpatched VMware ESXi. February opens two fronts at once.
· Manuel López Pérez
news · 6 min
BOLDMOVE on FortiOS attributed to a China-nexus actor, ALPC zero-day in Patch Tuesday, MFA seeds stolen from GoTo, NIS2 enters into force, and the first generation of ChatGPT jailbreaks. What moved in January, ranked by real impact.
· Manuel López Pérez
news · 1 min
Critical analysis of RustScan, the tool that promised to scan ports much faster than Nmap. Is it truly revolutionary or just an aggressive wrapper? Real comparison with advanced Nmap configurations that achieve more accurate and faster results.
· Manuel López Pérez
