Category: Securityaffairs

CVE-2022-47966 impacting multiple Zoho ManageEngine products
08
Sep
2023

Nation-state actors exploit Fortinet FortiOS SSL-VPN and Zoho ManageEngine ServiceDesk Plus, CISA warns

Nation-state actors exploit Fortinet FortiOS SSL-VPN and Zoho ManageEngine ServiceDesk Plus, CISA warns Pierluigi Paganini September 08, 2023 U.S. CISA…

Apple discloses 2 actively exploited zero-days in iPhones, Macs
08
Sep
2023

Zero-days fixed by Apple were used to deliver Pegasus spyware

Zero-days fixed by Apple were used to deliver NSO Group’s Pegasus spyware Pierluigi Paganini September 08, 2023 Citizen Lab reported…

Apple discloses 2 actively exploited zero-days in iPhones, Macs
07
Sep
2023

Apple discloses 2 actively exploited zero-days in iPhones, Macs

Apple discloses 2 new actively exploited zero-day flaws in iPhones, Macs Pierluigi Paganini September 07, 2023 Apple rolled out emergency…

A malvertising campaign is delivering a new version of macOS Atomic Stealer
07
Sep
2023

A malvertising campaign is delivering a new version of macOS Atomic Stealer

A malvertising campaign is delivering a new version of the macOS Atomic Stealer Pierluigi Paganini September 07, 2023 Researchers spotted…

Two flaws in Apache SuperSet allow to remotely hack servers
07
Sep
2023

Two flaws in Apache SuperSet allow to remotely hack servers

Two flaws in Apache SuperSet allow to remotely hack servers Pierluigi Paganini September 07, 2023 A couple of security vulnerabilities…

Chinese cyberspies obtained Microsoft signing key from Windows crash dump due to a mistake
07
Sep
2023

Chinese cyberspies obtained Microsoft signing key from Windows crash dump due to a mistake

Chinese cyberspies obtained Microsoft signing key from Windows crash dump due to a mistake Pierluigi Paganini September 07, 2023 Microsoft…

Google addressed an actively exploited zero-day in Android
06
Sep
2023

Google addressed an actively exploited zero-day in Android

Google addressed an actively exploited zero-day in Android Pierluigi Paganini September 06, 2023 Google released September 2023 Android security updates…

A zero-day in Atlas VPN Linux Client leaks users' IP address
06
Sep
2023

A zero-day in Atlas VPN Linux Client leaks users’ IP address

A zero-day in Atlas VPN Linux Client leaks users’ IP address Pierluigi Paganini September 06, 2023 Experts warn of an…

MITRE and CISA release Caldera for OT attack emulation
06
Sep
2023

MITRE and CISA release Caldera for OT attack emulation

MITRE and CISA release Caldera for OT attack emulation Pierluigi Paganini September 06, 2023 MITRE and CISA released a Caldera…

ASUS routers are affected by 3 critical remote code execution flaws
06
Sep
2023

ASUS routers are affected by 3 critical remote code execution flaws

ASUS routers are affected by three critical remote code execution flaws Pierluigi Paganini September 06, 2023 Three critical remote code…

Hackers stole $41M worth of crypto assets from crypto gambling firm Stake
05
Sep
2023

Hackers stole $41M worth of crypto assets from crypto gambling firm Stake

Hackers stole $41M worth of crypto assets from crypto gambling firm Stake Pierluigi Paganini September 05, 2023 Crypto gambling site…

Freecycle data breach impacted 7 Million users
05
Sep
2023

Freecycle data breach impacted 7 Million users

Freecycle data breach impacted 7 Million users Pierluigi Paganini September 05, 2023 The nonprofit organization Freecycle Network (Freecycle.org) confirmed that…