Security Affairs
Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds|JADEPUFFER: First End-to-End AI-Driven Ransomware Operation|The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident|Law enforcememt operation disrupted Malicious Residential Proxy Networks NetNut|Government and Healthcare Are the Weakest Links in Global Email Security|Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds|JADEPUFFER: First End-to-End AI-Driven Ransomware Operation|The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident|Law enforcememt operation disrupted Malicious Residential Proxy Networks NetNut|Government and Healthcare Are the Weakest Links in Global Email Security|Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|
Advertisement

Ad Placeholder

Full Width × 90

Breaking News

Security Affairs newsletter Round 381

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here. Twilio hackers also breached the food delivery firm DoorDash Unprecedented cyber attack hit State Infrastructure of […]

newsletter

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box.

If you want to also receive for free the newsletter with the international press subscribe here.

Twilio hackers also breached the food delivery firm DoorDash
Unprecedented cyber attack hit State Infrastructure of Montenegro
Threat actor abuses Genshin Impact Anti-Cheat driver to disable antivirus
Critical flaw impacts Atlassian Bitbucket Server and Data Center
Iran-linked Mercury APT exploited Log4Shell in SysAid Apps for initial access
GoldDragon campaign: North-Korea linked Kimsuky APT adopts victim verification technique
0ktapus phishing campaign: Twilio hackers targeted other 136 organizations
LastPass data breach: threat actors stole a portion of source code
Nobelium APT uses new Post-Compromise malware MagicWeb
GAIROSCOPE attack allows to exfiltrate data from Air-Gapped systems via ultrasonic tones
Threat actors are using the Tox P2P messenger as C2 server
Plex discloses data breach and urges password reset
AiTM phishing campaign also targets G Suite users
VMware fixed a privilege escalation issue in VMware Tools
France hospital Center Hospitalier Sud Francilien suffered ransomware attack
Microsoft publicly discloses details on critical ChromeOS flaw
GitLab fixed a critical Remote Code Execution (RCE) bug in CE and EE releases
Over 80,000 Hikvision cameras can be easily hacked
CISA adds Palo Alto Networks PAN-OS to its Known Exploited Vulnerabilities Catalog
Counterfeit versions of popular mobile devices target WhatsApp and WhatsApp Business
Lockbit leak sites hit by mysterious DDoS attack after Entrust hack
European Cybersecurity in Context: A Policy-Oriented Comparative Analysis
8-year-old Linux Kernel flaw DirtyCred is nasty as Dirty Pipe
Group-IB CEO will remain in jail – complaint denied
Escanor Malware delivered in Weaponized Microsoft Office Documents
Donot Team cyberespionage group updates its Windows malware framework
Fake DDoS protection pages on compromised WordPress sites lead to malware infections
Threat actors are stealing funds from General Bytes Bitcoin ATM
Grandoreiro banking malware targets Mexico and Spain
White hat hackers broadcasted talks and hacker movies through a decommissioned satellite

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″][adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]

Tags

Hackinghacking newsinformation security newsIT Information SecuritymalwareNewsletterPierluigi PaganiniSecurity News

More Stories>

Pegasus Used Against MEP Investigating Pegasus, Citizen Lab FindsBreaking News

Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds

JADEPUFFER: First End-to-End AI-Driven Ransomware OperationArtificial Intelligence

JADEPUFFER: First End-to-End AI-Driven Ransomware Operation

The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel IncidentArtificial Intelligence

The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident

Security>

Hacking>

Malware>