Security Affairs
U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog|U.S. Charges Canadian Man in Alleged Hack of University Supercomputers|Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog|U.S. Charges Canadian Man in Alleged Hack of University Supercomputers|Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|
Advertisement

Ad Placeholder

Full Width × 90

Breaking News

Security Affairs newsletter Round 408 by Pierluigi Paganini

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here. Clasiopa group targets materials research in Asia CERT of Ukraine says Russia-linked APT backdoored multiple govt […]

newsletter

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box.

If you want to also receive for free the newsletter with the international press subscribe here.

Clasiopa group targets materials research in Asia
CERT of Ukraine says Russia-linked APT backdoored multiple govt sites
UK won the Military Cyberwarfare exercise Defence Cyber Marvel 2 (DCM2)
CISA warns of disruptive attacks amid the anniversary of Russia’s invasion of Ukraine
Highly evasive cryptocurrency miner targets macOS
Hackers are actively exploiting CVE-2022-47966 flaw in Zoho ManageEngine
The alleged author of NLBrute Malware was extradited to US from Georgia
Fortinet FortiNAC CVE-2022-39952 flaw exploited in the wild hours after the release of PoC exploit
The European Commission has banned its staff from using TikTok over security concerns
Many cyber operations conducted by Russia are yet to be publicly disclosed, says Dutch intelligence
The number of devices infected by the MyloBot botnet is rapidly increasing
Experts found a large new class of bugs ‘class’ in Apple devices
CISA adds IBM Aspera Faspex and Mitel MiVoice to Known Exploited Vulnerabilities Catalog
VMware addressed a critical bug in Carbon Black App Control
PoC exploit code for critical Fortinet FortiNAC bug released online
HardBit ransomware gang adjusts their demands so the insurance company would cover the ransom cost
Resecurity warns about cyber-attacks on data center service providers
Stealc, a new advanced infostealer appears in the threat landscape
A sophisticated threat actor hit cryptocurrency exchange Coinbase
Samsung announces Message Guard feature to neutralize zero-click attacks
Social engineering, deception becomes increasingly sophisticated
Lockbit ransomware gang hit the Portuguese municipal water utility Aguas do Porto
Frebniis malware abuses Microsoft IIS feature to create a backdoor
ENISA and CERT-EU warns Chinese APTs targeting EU organizations
Hackers disclose Atlassian data after the theft of an employee’s credentials

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)