WhatsApp fixed zero-day used to deploy Paragon Graphite spyware
WhatsApp fixed zero-day flaw used to deploy Paragon Graphite spyware Pierluigi Paganini March 20, 2025 WhatsApp fixed a zero-click, zero-day vulnerability used to install Paragon’s…
Category: Securityaffairs
California Cryobank, the largest US sperm bank, disclosed a data breach
California Cryobank, the largest US sperm bank, disclosed a data breach Pierluigi Paganini March 19, 2025 California Cryobank, the largest US sperm bank, suffered a…
AI Code Editors exploited for silent supply chain attacks
Rules File Backdoor: AI Code Editors exploited for silent supply chain attacks Pierluigi Paganini March 19, 2025 The Rules File Backdoor attack targets AI code…
U.S. CISA adds Fortinet FortiOS/FortiProxy and GitHub Action flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Fortinet FortiOS/FortiProxy and GitHub Action flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini March 19, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA)…
Nation-state actors and cybercrime gangs abuse malicious .lnk files for espionage and data theft
Nation-state actors and cybercrime gangs abuse malicious .lnk files for espionage and data theft Pierluigi Paganini March 18, 2025 11 state-sponsored APTs exploit malicious .lnk…
ChatGPT SSRF bug quickly becomes a favorite attack vector
ChatGPT SSRF bug quickly becomes a favorite attack vector Pierluigi Paganini March 18, 2025 Threat actors exploit a server-side request forgery (SSRF) flaw, tracked as…
GitHub Action tj-actions/changed-files was compromised in supply chain attack
GitHub Action tj-actions/changed-files was compromised in supply chain attack Pierluigi Paganini March 18, 2025 The GitHub Action tj-actions/changed-files was compromised, enabling attackers to extract secrets…
New StilachiRAT uses sophisticated techniques to avoid detection
New StilachiRAT uses sophisticated techniques to avoid detection Pierluigi Paganini March 18, 2025 Microsoft discovered a new remote access trojan (RAT), dubbed StilachiRAT, that uses…
Threat actors rapidly exploit new Apache Tomcat flaw following PoC release
Pierluigi Paganini March 17, 2025 Apache Tomcat Vulnerability Actively Exploited Just 30 Hours After Public Disclosure Threat actors began exploiting a recently disclosed Apache Tomcat…
Attackers use CSS to create evasive phishing messages
Attackers use CSS to create evasive phishing messages Pierluigi Paganini March 17, 2025 Threat actors exploit Cascading Style Sheets (CSS) to bypass spam filters and…
Researcher releases free GPU-Based decryptor for Linux Akira ransomware
Researcher releases free GPU-Based decryptor for Linux Akira ransomware Pierluigi Paganini March 17, 2025 A researcher released a free decryptor for Linux Akira ransomware, using…
Researcher releases free GPU-Based decryptor for Linux Akira ransomware
Researcher releases free GPU-Based decryptor for Linux Akira ransomware Pierluigi Paganini March 17, 2025 A researcher released a free decryptor for Linux Akira ransomware, using…