Security Affairs
Dutch Intelligence Warns Russia Uses Hacked IP Cameras for Military Espionage|Critical 7-Zip Flaw Allows Code Execution by Opening Crafted XZ-Compressed Files. Update it now!|CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers|AI Agents Turned Into Attackers: Hugging Face Reveals Autonomous Intrusion Campaign|Volexity Uncovers Zero-Day Campaign Targeting SonicWall VPN Appliances|SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 106|Security Affairs newsletter Round 586 by Pierluigi Paganini – INTERNATIONAL EDITION|Attackers Can Take Over WordPress Sites Using Newly Released wp2shell Exploits|OpenSSL Fixes HollowByte Memory Exhaustion Bug|Daxin: 13-Year-Old China-Linked Malware Found Still Active on Manufacturer’s Network|U.S. CISA adds Fortinet FortiSandbox and Microsoft SharePoint flaws to its Known Exploited Vulnerabilities catalog|Ernst & Young (EY) Investigates Data Breach Involving Third-Party Support Tickets|Dutch Intelligence Warns Russia Uses Hacked IP Cameras for Military Espionage|Critical 7-Zip Flaw Allows Code Execution by Opening Crafted XZ-Compressed Files. Update it now!|CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers|AI Agents Turned Into Attackers: Hugging Face Reveals Autonomous Intrusion Campaign|Volexity Uncovers Zero-Day Campaign Targeting SonicWall VPN Appliances|SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 106|Security Affairs newsletter Round 586 by Pierluigi Paganini – INTERNATIONAL EDITION|Attackers Can Take Over WordPress Sites Using Newly Released wp2shell Exploits|OpenSSL Fixes HollowByte Memory Exhaustion Bug|Daxin: 13-Year-Old China-Linked Malware Found Still Active on Manufacturer’s Network|U.S. CISA adds Fortinet FortiSandbox and Microsoft SharePoint flaws to its Known Exploited Vulnerabilities catalog|Ernst & Young (EY) Investigates Data Breach Involving Third-Party Support Tickets|
Advertisement

Ad Placeholder

Full Width × 90

All Posts

7670 posts found

North Korea ScarCruft APT used previously undetected Dolphin Backdoor against South Korea

North Korea ScarCruft APT used previously undetected Dolphin Backdoor against South Korea

North Korea-linked ScarCruft group used a previously undocumented backdoor called Dolphin against targets in South Korea. ESET researchers discovered a previously undocumented...
APTDecember 1, 2022
Lastpass discloses the second security breach this year

Lastpass discloses the second security breach this year

LastPass disclosed a new security breach, threat actors had access to its cloud storage using information stolen in...
Breaking NewsDecember 1, 2022
Google links three exploitation frameworks to Spanish commercial spyware vendor Variston

Google links three exploitation frameworks to Spanish commercial spyware vendor Variston

Google’s Threat Analysis Group (TAG) linked three exploitation frameworks to a Spanish surveillance spyware vendor named Variston. While...
Breaking NewsNovember 30, 2022
Attackers abused the popular TikTok Invisible Challenge to spread info-stealer

Attackers abused the popular TikTok Invisible Challenge to spread info-stealer

Threat actors are exploiting interest in a popular TikTok challenge, dubbed Invisible Challenge, to trick users into downloading...
Breaking NewsNovember 30, 2022
China-linked UNC4191 APT relies on USB Devices in attacks against entities in the Philippines

China-linked UNC4191 APT relies on USB Devices in attacks against entities in the Philippines

An alleged China-linked cyberespionage group, tracked as UNC4191, used USB devices in attacks aimed at Philippines entities. Mandiant...
APTNovember 30, 2022
ENC Security, the encryption provider for Sony and Lexar, leaked sensitive data for over a year

ENC Security, the encryption provider for Sony and Lexar, leaked sensitive data for over a year

CyberNews experts discovered that ENC Security, a Netherlands software company, had been leaking critical business data since May...
Breaking NewsNovember 30, 2022
Advertisement

Ad Placeholder

970 × 250

Threat actors are offering access to corporate networks via unauthorized Fortinet VPN access

Threat actors are offering access to corporate networks via unauthorized Fortinet VPN access

Cyble observed Initial Access Brokers (IABs) offering access to enterprise networks compromised via a critical flaw in Fortinet...
Breaking NewsNovember 29, 2022
CISA adds Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities Catalog

CISA adds Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities Catalog

CISA added a critical flaw impacting Oracle Fusion Middleware, tracked as CVE-2021-35587, to its Known Exploited Vulnerabilities Catalog. The...
Breaking NewsNovember 29, 2022
Tips for Gamifying Your Cybersecurity Awareness Training Program

Tips for Gamifying Your Cybersecurity Awareness Training Program

In today’s technological world, educating people about cybersecurity awareness is an absolute necessity. According to one report, 82%...
Breaking NewsNovember 29, 2022
Advertisement

Ad Placeholder

728 × 90