Category: Securityaffairs

U.S. CISA adds Synacor Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog
10
Oct
2025

U.S. CISA adds Grafana flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Grafana flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini October 10, 2025 U.S. Cybersecurity and Infrastructure Security…

RondoDox Botnet targets 56 flaws across 30+ device types worldwide
10
Oct
2025

RondoDox Botnet targets 56 flaws across 30+ device types worldwide

RondoDox Botnet targets 56 flaws across 30+ device types worldwide Pierluigi Paganini October 10, 2025 RondoDox botnet exploits 56 known…

ClayRat campaign uses Telegram and phishing sites to distribute Android spyware
09
Oct
2025

ClayRat campaign uses Telegram and phishing sites to distribute Android spyware

ClayRat campaign uses Telegram and phishing sites to distribute Android spyware Pierluigi Paganini October 09, 2025 ClayRat Android spyware targets…

WordPress Plugin flaw lets hackers access Admin accounts
09
Oct
2025

WordPress Plugin flaw lets hackers access Admin accounts

CVE-2025-5947: WordPress Plugin flaw lets hackers access Admin accounts Pierluigi Paganini October 09, 2025 Threat actors are exploiting a critical…

SonicWall dismisses zero-day fears after Ransomware probe
09
Oct
2025

Threat actors steal firewall configs, impacting all SonicWall Cloud Backup users

Threat actors steal firewall configs, impacting all SonicWall Cloud Backup users Pierluigi Paganini October 09, 2025 All SonicWall Cloud Backup…

Discord discloses third-party breach affecting customer support data
09
Oct
2025

Discord denies massive breach, confirms limited exposure of 70K ID photos

Discord denies massive breach, confirms limited exposure of 70K ID photos Pierluigi Paganini October 09, 2025 Discord won’t pay threat…

Asahi halts ordering, shipping, and customer service after cyberattack
09
Oct
2025

Qilin ransomware claimed responsibility for the Asahi attack

Qilin ransomware claimed responsibility for the attack on the beer giant Asahi Pierluigi Paganini October 08, 2025 Qilin ransomware claimed…

DragonForce, LockBit, and Qilin, a new triad aims to dominate the ransomware landscape
08
Oct
2025

DragonForce, LockBit, and Qilin, a new triad aims to dominate the ransomware landscape

DragonForce, LockBit, and Qilin, a new triad aims to dominate the ransomware landscape Pierluigi Paganini October 08, 2025 DragonForce, LockBit,…

DraftKings thwarts credential stuffing attack, but urges password reset and MFA
08
Oct
2025

DraftKings thwarts credential stuffing attack, but urges password reset and MFA

DraftKings thwarts credential stuffing attack, but urges password reset and MFA Pierluigi Paganini October 08, 2025 DraftKings warns of credential…

Redis patches 13-Year-Old Lua flaw enabling Remote Code Execution
08
Oct
2025

Redis patches 13-Year-Old Lua flaw enabling Remote Code Execution

Redis patches 13-Year-Old Lua flaw enabling Remote Code Execution Pierluigi Paganini October 08, 2025 Redis warns of CVE-2025-49844, a Lua…

U.S. CISA adds Synacor Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog
08
Oct
2025

U.S. CISA adds Synacor Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Synacor Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini October 07, 2025…

Fortra addressed a maximum severity flaw in GoAnywhere MFT software
07
Oct
2025

GoAnywhere MFT zero-day used by Storm-1175 in Medusa ransomware campaigns

GoAnywhere MFT zero-day used by Storm-1175 in Medusa ransomware campaigns Pierluigi Paganini October 07, 2025 Storm-1175 exploits GoAnywhere MFT flaw…