Latest
An unauthenticated SQL injection vulnerability, rated 10.0 on the CVSS scale, has been actively exploited in Metabase, the open-source business intelligence tool used by thousands of organizations. The computer manufacturer Framework and the platform Tally have already confirmed customer data leaks.
A malicious actor compromised the upstream infrastructure of BdThemes, a premium WordPress plugin publisher, by poisoning a remote JSON feed to quietly create ghost admin accounts on affected sites. Several plugins totaling over 350,000 active installations have been removed from the WordPress.org repository.
The retail giant Marks & Spencer has confirmed the theft of customer data during a ransomware cyberattack that occurred in April 2025. With around 22 million loyalty cardholders and a parallel attack on the Co-op, nearly 28 million people have had their data compromised.
CISA has repeatedly listed vulnerabilities in Dassault Systèmes' DELMIA Apriso software in its catalog of actively exploited vulnerabilities. These critical flaws could allow attackers to compromise sensitive employee data and disseminate it on the dark web.
Researchers have demonstrated that the integration of the Tor network into Monero introduces a fundamental vulnerability that allows the identification of the originating IP address of transactions through an attack called ProxyMark.
A new free and technical tool, Souverainet.fr, audits domains and assigns a sovereignty score from 0 to 5 based on the actual location of hosting, the extension, and the name servers. A real-time diagnosis to understand who a site truly depends on.
Between the SREN law, which mandates age verification on pornographic sites, and the ban on social media for those under 15 adopted by the French Parliament, concerns regarding privacy and the effectiveness of these measures are mounting.
The main t.me domain of Telegram has been placed in "serverHold" status by the .me registry, breaking the DNS resolution of all Telegram short links globally. The suspension is said to be related to OFAC compliance requirements.
From the BBC to the New York Times, an increasing number of organizations are deploying .onion mirrors. End-to-end encryption, resistance to censorship, and native authentication: here’s why onion services are appealing beyond the dark web.
Despite the European Parliament's rejection in March 2026, the Council has reintroduced through the backdoor the exemption allowing the voluntary scanning of private communications. On July 9, 2026, the text was adopted without reaching the required absolute majority to block it.