OpenSSL Fixes HollowByte Memory Exhaustion Bug
OpenSSL Fixes HollowByte Memory Exhaustion Bug Pierluigi Paganini July 18, 2026 Okta disclosed HollowByte, an 11-byte OpenSSL flaw that lets remote attackers exhaust server memory…
Category: Securityaffairs
Daxin: 13-Year-Old China-Linked Malware Found Still Active on Manufacturer’s Network
Daxin: 13-Year-Old China-Linked Malware Found Still Active on Manufacturer’s Network Pierluigi Paganini July 18, 2026 Researchers found China’s Daxin rootkit and a new Stupig backdoor…
U.S. CISA adds Fortinet FortiSandbox and Microsoft SharePoint flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Fortinet FortiSandbox and Microsoft SharePoint flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini July 18, 2026 U.S. Cybersecurity and Infrastructure Security…
A cyberattack hit Nichirei, one of Japan’s largest food companies
A cyberattack hit Nichirei, one of Japan’s largest food companies Pierluigi Paganini July 17, 2026 A cyberattack hit one of Japan’s largest food companies, Nichirei,…
Ernst & Young (EY) Investigates Data Breach Involving Third-Party Support Tickets
Ernst & Young (EY) Investigates Data Breach Involving Third-Party Support Tickets Pierluigi Paganini July 17, 2026 Ernst & Young (EY) disclosed a data breach after…
U.S. CISA adds KNX Association KNX Protocol Connection Authorization Option 1 and Oracle flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds KNX Association KNX Protocol Connection Authorization Option 1 and Oracle flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini July 17, 2026…
New Russian Campaign Uses Fake Webex and Zoom Installers to Deploy Starland RAT
New Russian Campaign Uses Fake Webex and Zoom Installers to Deploy Starland RAT Pierluigi Paganini July 17, 2026 Russian-speaking UAT-11795 spreads trojanized Zoom, Webex, and…
Two Scattered Spider Members Sentenced to Prison Over £29 Million TfL Cyberattack
Two Scattered Spider Members Sentenced to Prison Over £29 Million TfL Cyberattack Pierluigi Paganini July 16, 2026 Two members of the Scattered Spider cybercrime group…
Claude Code and DeepSeek Powered Chinese Cyber Espionage Campaign
Claude Code and DeepSeek Powered Chinese Cyber Espionage Campaign Pierluigi Paganini July 16, 2026 Chinese actors used Claude Code and DeepSeek to automate attacks that…
TuxBot v3: The IoT Botnet Built With AI
TuxBot v3: The IoT Botnet Built With AI – Bugs, Disclaimers and All Pierluigi Paganini July 16, 2026 TuxBot v3, an AI-built IoT botnet for…
Zoom Fixes CVE-2026-53412, a Critical Account Takeover Bug
Zoom Fixes CVE-2026-53412, a Critical Account Takeover Bug Pierluigi Paganini July 16, 2026 Zoom warns of a critical Windows flaw, tracked as CVE-2026-53412, that could…
U.S. CISA adds SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini July 15, 2026 U.S. Cybersecurity and Infrastructure Security Agency (CISA)…