Security Affairs
Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia|Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens|Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia|Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens|
Advertisement

Ad Placeholder

Full Width × 90

Breaking News

Security Affairs newsletter Round 226

A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs Hi folk, let me inform you that I suspended the newsletter service, anyway I’ll continue to provide you a list of published posts every week through the blog. Once again thank you! DealPly adware abuses reputation services to remain […]

newsletter

A new round of the weekly SecurityAffairs newsletter arrived!

The best news of the week with Security Affairs

Hi folk, let me inform you that I suspended the newsletter service, anyway I’ll continue to provide you a list of published posts every week through the blog.

Once again thank you!

DealPly adware abuses reputation services to remain under the radar
Houston County Schools in Alabama delayed the school years opening due to a malware attack
Poshmark, the social commerce marketplace, discloses a data breach
Fraudster stole $870,000 from 2 US universities with spear-phishing mails
GermanWiper, a data-wiping malware that is targeting Germany
Hacking Radio Blasting Systems for Fun & Explosions
Machete cyber-espionage group targets Latin America military
StockX hacked, customers data offered for sale on the dark web
The US Gov is testing high-altitude balloons for surveillance
CafePress Data Breach exposes technical details of 23 Million users
Crooks turn victims into money mules via confidence/romance scams
Expert publicly disclosed a zero-day vulnerability in KDE
QualPwn Bugs in Qualcomm chips could allow hacking Android Over the Air
Russia-linked STRONTIUM APT targets IoT devices to hack corporate networks
The Evolution of Aggah: From Roma225 to the RG Campaign
New Lord Exploit Kit appears in the threat landscape
OilRig APT group: the evolution of attack techniques over time
SWAPGS Attack – A new Spectre-V1 attack affects modern chips
The number of exploits in the Echobot botnet reached 59
American Insurance firm State Farm victim of credential stuffing attacks
Cisco addressed critical flaws in Cisco Small Business 220 Series Smart Switches
New strain of Clipsa malware launches brute-force attacks on WordPress sites
WhatsApp flaws allow the attackers to manipulate conversations
3Fun Dating App leaked members location and personal details
A Zero-Day in Steam client for Windows affects over 100 Million users
Apple announces major changes to its bug bounty program, including higher rewards
Emsisoft released a free decryptor for JSWorm 4.0
Android Apps containing Clicker Trojan installed on over 100M devices
City of Naples, Florida, lost $700K after a cyberattack
Varenyky Spambot Trojan targets French users in alleged sextortion campaign
[adrotate banner=”9″] [adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]