Chaotic Eclipse discloses MiniPlasma zero-day, suggesting a missing or undone 2020 Windows security fix Pierluigi Paganini May 18, 2026 MiniPlasma: a Windows SYSTEM privilege escalation…
Attackers exploit Funnel Builder bug to inject e-skimmers into e-stores Pierluigi Paganini May 17, 2026 Attackers are exploiting a critical flaw in the WordPress Funnel…
Security Affairs newsletter Round 577 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini May 17, 2026 A new round of the weekly Security Affairs newsletter…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 97 Pierluigi Paganini May 17, 2026 Security Affairs Malware newsletter includes a collection of the best articles and research on…
Russian APT Turla builds long-term access tool with Kazuar Botnet evolution Pierluigi Paganini May 16, 2026 Russia-linked APT group Turla turned its Kazuar malware into…
Pwn2Own Berlin 2026, Day Three: DEVCORE Crowned Master of Pwn, $1.298 Million Total Pierluigi Paganini May 17, 2026 Pwn2Own Berlin 2026 ended with 47 zero-days…
U.S. CISA adds a flaw in Microsoft Exchange Server to its Known Exploited Vulnerabilities catalog Pierluigi Paganini May 16, 2026 The U.S. Cybersecurity and Infrastructure…
OpenAI hit by supply chain attack linked to malicious TanStack packages Pierluigi Paganini May 16, 2026 OpenAI said the TanStack supply chain attack compromised two…
NGINX Rift: an 18-year-old flaw in the world’s most deployed web server just came to light Pierluigi Paganini May 14, 2026 Researchers found a critical…
Pwn2Own Berlin 2026, Day Two: $385,750 more, Microsoft Exchange falls, and the running total crosses $900K Pierluigi Paganini May 15, 2026 Day two of Pwn2Own…
Pwn2Own Berlin 2026, Day One: $523,000 paid out, AI products fall Pierluigi Paganini May 15, 2026 Pwn2Own Berlin 2026 day one saw 22 entries and…
CVE-2026-42897: Microsoft confirms active exploitation of Exchange Server zero-day Pierluigi Paganini May 15, 2026 Microsoft warned that attackers are exploiting a new Exchange Server zero-day…
