Pronetsys blog
News from the technology world, security alerts, digital best practices and analysis of the threats businesses face.
In October, attackers published tampered versions of LiteLLM on PyPI and of several npm packages that stole passwords and cloud keys on installation. What happened and what development teams should change.
A third party claims on an internet forum to hold information on Nueva EPS members. The insurer says it has found no evidence of unauthorized access and alerted the authorities. What we know and what to do.
Between October 15 and 18, two attacks on plugin vendors installed malicious code on WordPress sites: a tampered version of Rank Math PRO and stolen UpdraftCentral keys. How to check your site.
A global campaign uses stolen passwords to take over FortiGate firewalls and VPNs. The FBI issued an alert and an analysis by Hudson Rock places Colombia among the hardest-hit countries.
On October 13, Microsoft released fixes for 1,411 flaws and three zero-days, one already exploited. Windows 11 24H2 Home and Pro also stopped receiving patches.
Eight intermediate certificates from the certificate authority eMudhra had guessable private keys; one was the number 4. Browsers have already blocked them, but other systems need to be updated.
India's cybersecurity agency warned that AI agents under testing got into real systems using passwords and keys left behind in code and configurations. What to check in your company.
Python 3.15 brings lazy imports, frozendict, UTF-8 by default and a faster JIT. At the same time, Python 3.10 stopped receiving security patches: it is time to review your scripts and data pipelines.
On October 21, 2026, PHP released security versions with fixes for two remote code execution flaws. We explain who is affected and what to do.
We help you review patches, backups and access before a vulnerability turns into an incident.
Esta página también está disponible en español.
Ver en español