BLOG
Want to stay up to date on cybersecurity but don’t have time to read ten different websites every morning?
We are Nacata Security, an offensive cybersecurity company, and we’re here to keep you informed.
Every week we go through what’s happening in the sector and tell you straight: vulnerabilities being exploited right now, relevant incidents, new tools and everything we think deserves your attention.
You’ll find the news sorted into categories —Incidents, Threats, Cyber Intelligence, Technical, Certifications, Tools and AI— so you can go straight to what interests you.
- All
- Incidents
- Threats
- Cyber Intelligence
- Technical
- Certifications
- Tools
- AI
- Newest
- Oldest
Vague AI generates no value
Does your company claim to use AI but fails to show how or where?
7.4M devices looted in 2026
Can you imagine someone emptying your digital wallet while you sleep, without you even noticing?
France: Tax Authority Laid Bare
Can you imagine someone knowing your tax return without your knowledge?
Firefox revokes its exposed GPG key
Did you know that Firefox signs every download with a secret key to guarantee it is legitimate?
MessiahGPT Forges Unlimited Malware
Did you know that buying ready-made ransomware costs less than your streaming subscription?
GeoServer falls to its zero-day
Does your organization use GeoServer to manage critical geospatial data in production?
LiteLLM infected 2,500 companies
Did you know that a single unrevoked token can compromise thousands of organizations at once?
OSCP: think like the attacker
OSCP, OffSec’s pentesting certification that validates real ethical hacking.
ExfilSquad leaks data via torrents
Can you imagine your corporate data circulating across the internet with nothing you can do about it?
Rome Forges Europe’s Shield
Do you know what risks are keeping Europe’s cybersecurity leaders up at night?
Zero Trust shields enterprise AI
Is your company already using AI to develop code or make critical decisions?
Talos opens its secret files
Have you ever wondered what really happens when an attack hits?
Moucka steals billions
Did you know someone drained one hundred and sixty-five companies from the cloud without raising any suspicion?
TP-Link Omada Hit by Chain Attack
Does your enterprise network rely on cloud-managed TP-Link Omada devices?
eWPT: real-world web pentesting
eWPT, the professional web pentesting certification issued by INE Security.
ChatGPT Fuels Fraud in Cambodia
Did you know that an AI can build a complete fake identity in seconds?
TencentDB saves your progress
How many times have you watched an AI agent start from scratch explaining the same things?
CornFlake Targets Hotel Wi-Fi
Have you connected to a hotel Wi-Fi in the past few months?
Ransomware Lurks in Brazil’s Classrooms
Did you know your university could be the easiest target to attack?
Altman Pumps the Brakes on AI
Did you ever imagine that an AI could hack on its own without any instructions?
Iran cuts off tap in Minnesota
Did you know that attacking a city’s water supply is easier than you think?
CareCloud leaks 350,000 medical records
Do you trust that your medical records are safe in your doctor’s hands?
eJPT: break into your first system
eJPT, the pentesting certification for absolute beginners from INE Security.
BlueShell Stalks Linux in Japan
Did you know Chinese hackers have been infiltrating Japanese companies for years without being detected?
PHP fixes 3 critical vulnerabilities
Does your web application talk to a database or process files uploaded by users?
Chrome 151 patches 370 vulnerabilities
How many security holes can the browser you use every day have?
SharePoint and Zimbra Under Siege
Does your company use SharePoint or Zimbra for daily teamwork?
Kali Linux 2026.2 Gets Fresh Look
Did you know your virtual machine was booting three times slower than necessary?
CVE-2026-8863 breaks Secure Boot
Did you know your machine can be protected and vulnerable at the same time?
Master Prisma SD-WAN with INE
Prisma SD-WAN: From Concepts to Deployment, INE’s new course on enterprise distributed networking.
AI uncovers zero-day in Linux
Did you know that an AI can find a hidden flaw in your operating system?
Microsoft deploys its AI army
What if the best defense against AI were another AI?
PEAR looted one million medical records
Have you ever wondered who stores your medical data and how they protect it?
BitLocker Takes Companies Hostage
Can you imagine arriving at work and being unable to open a single company file?
AI Falls Into Its Own Trap
Did you know that an AI can be defeated using its own internal rules?
wp2shell Bypasses Password Always
Is your WordPress website exposed to the Internet right now?
Zimbra caught in Russian espionage
Do you know if your corporate email is being emptied right now by Russian spies?
Regulation is colonizing your career
Did you know your next certification could become legally mandatory?
AI Breaks Out of Its Cage
Did you know that an AI can decide to bypass the rules on its own?
Zero-day chain in Siemens ROX II
Did you know that the switch protecting your industrial network could be the entry point?
Burp Suite names four ambassadors
Do you know who teaches you to use the security tools you rely on?
Printers distributed ransom notes
Can you imagine arriving at work to find your computer locked with no explanation?
CAV3RN, the threat in your calendar
Did you know your work calendar can become a spying channel?
Security is not improvised, it is audited. At Nacata Security we detect vulnerabilities and protect your company, because a single flaw can cost you everything you have built.










































