Security Affairs
U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog|U.S. Charges Canadian Man in Alleged Hack of University Supercomputers|Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog|U.S. Charges Canadian Man in Alleged Hack of University Supercomputers|Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|
Advertisement

Ad Placeholder

Full Width × 90

Breaking News

Security Affairs newsletter Round 327

A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the international press subscribe here. Four years after its takedown, AlphaBay marketplace revamped Classified documents from Lithuanian Ministry of Foreign Affairs are […]

newsletter

A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box.

If you want to also receive for free the international press subscribe here.

Four years after its takedown, AlphaBay marketplace revamped
Classified documents from Lithuanian Ministry of Foreign Affairs are available for sale
Dumping user’s Microsoft Azure credentials in plaintext from Windows 365
SynAck ransomware gang releases master decryption keys for old victims
Vice Society ransomware also exploits PrintNightmare flaws in its attack
Google open-sourced Allstar tool to secure GitHub repositories
Microsoft warns of a evasive year-long spear-phishing campaign targeting Office 365 users
Trend Micro warns customers of zero-day attacks against its products
Magniber Ransomware operators use PrintNightmare exploits to infect Windows servers
Microsoft warns of a new unpatched Windows Print Spooler RCE zero-day
Threat actors behind the Poly Network hack are returning stolen funds
Accenture has been hit by a LockBit 2.0 ransomware attack
UNC215, an alleged China-linked APT group targets Israel orgs
Adobe fixes critical flaws in Magento, patch it immediately
Microsoft patch Tuesday security updates fix PrintNightmare flaws
$611 million stolen in Poly Network cross-chain hack
New eCh0raix ransomware variant targets NAS devices from both QNAP and Synology vendors
Microsoft Azure Sentinel uses Fusion ML to detect ransomware attacks
FlyTrap, a new Android Trojan compromised thousands of Facebook accounts
StealthWorker botnet targets Synology NAS devices to drop ransomware
City of Joplin paid a 320K ransom after a ransomware Attack
Australian Cyber Security Centre warns of a surge of LockBit 2.0 ransomware attacks
Threat actors are probing Microsoft Exchange servers for ProxyShell flaws
1M compromised cards available for free in the underground market
A zero-day RCE in Cisco ASDM has yet to be fixed

If you want to also receive for free the international press subscribe here.

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″][adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

[adrotate banner=”5″]

[adrotate banner=”13″]