SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 71
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter 9 Malicious NuGet Packages…
Category: Securityaffairs
China-backed hackers launch first large-scale autonomous AI cyberattack
Anthropic: China-backed hackers launch first large-scale autonomous AI cyberattack Pierluigi Paganini November 16, 2025 China-linked actors used Anthropic’s AI to automate and run cyberattacks in…
Multiple Vulnerabilities in GoSign Desktop lead to Remote Code Execution
Multiple Vulnerabilities in GoSign Desktop lead to Remote Code Execution Pierluigi Paganini November 15, 2025 Researchers found a critical vulnerability in GoSign Desktop: TLS Certificate…
U.S. CISA adds Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini November 15, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet…
Critical CVE-2025-59367 flaw lets hackers access ASUS DSL routers remotely
Critical CVE-2025-59367 flaw lets hackers access ASUS DSL routers remotely Pierluigi Paganini November 14, 2025 ASUS fixed a critical auth-bypass flaw (CVE-2025-59367) in DSL routers…
Millions of sites at risk from Imunify360 critical flaw exploit
Millions of sites at risk from Imunify360 critical flaw exploit Pierluigi Paganini November 14, 2025 A vulnerability affecting Imunify360 lets attackers run code via malicious…
Critical FortiWeb flaw under attack, allowing complete compromise
Critical FortiWeb flaw under attack, allowing complete compromise Pierluigi Paganini November 14, 2025 A Fortinet FortiWeb auth-bypass flaw is being actively exploited, allowing attackers to…
BSI issues guidelines to counter evasion attacks targeting LLMs
Germany’s BSI issues guidelines to counter evasion attacks targeting LLMs Pierluigi Paganini November 14, 2025 Germany’s BSI warns of rising evasion attacks on LLMs, issuing…
Washington Post notifies 10,000 individuals affected in Oracle-linked data theft
Washington Post notifies 10,000 individuals affected in Oracle-linked data theft Pierluigi Paganini November 14, 2025 The Washington Post alerts nearly 10,000 employees and contractors that…
Chrome extension “Safery” steals Ethereum wallet seed phrases
Chrome extension “Safery” steals Ethereum wallet seed phrases Pierluigi Paganini November 13, 2025 Malicious Chrome extension “Safery: Ethereum Wallet” steals users’ seed phrases while posing…
A new round of Europol’s Operation Endgame dismantled Rhadamanthys, Venom RAT, and Elysium botnet
A new round of Europol’s Operation Endgame dismantled Rhadamanthys, Venom RAT, and Elysium botnet Pierluigi Paganini November 13, 2025 Europol’s Operation Endgame dismantles Rhadamanthys, Venom…
U.S. CISA adds WatchGuard Firebox, Microsoft Windows, and Gladinet Triofox flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds WatchGuard Firebox, Microsoft Windows, and Gladinet Triofox flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini November 13, 2025 U.S. Cybersecurity and…