GoDaddy found malware on 1,980 WordPress sites using Steam as C2 infrastructure
GoDaddy found malware on 1,980 WordPress sites using Steam as C2 infrastructure Pierluigi Paganini June 02, 2026 Malware on approximately 2,000 WordPress sites hid C2…
Category: Securityaffairs
U.S. CISA adds Palo Alto Networks PAN-OS flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Palo Alto Networks PAN-OS flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 01, 2026 U.S. Cybersecurity and Infrastructure Security Agency…
A SpaceX Security Engineer Used AI to Find a 19-Year-Old Linux Bug That Gives Attackers Root
CIFSwitch, a Linux Root Bug Hidden in Plain Sight for 19 Years Pierluigi Paganini June 01, 2026 CIFSwitch is a 19-year-old Linux logic bug turning…
Ransomware Operators Keep Business Hours. The Data Proves It
Ransomware Operators Keep Business Hours. The Data Proves It Pierluigi Paganini June 01, 2026 16,699 ransomware leak posts over 2 years show 84% drop Monday–Friday,…
CVE-2026-8732: The WP Maps Pro Flaw That Lets Anyone Create a WordPress Admin Without a Password
CVE-2026-8732: The WP Maps Pro Flaw That Lets Anyone Create a WordPress Admin Without a Password Pierluigi Paganini June 01, 2026 CVE-2026-8732 in WP Maps…
The Pentagon Finally Admits That Location Data Is a Battlefield Problem
The Pentagon Finally Admits That Location Data Is a Battlefield Problem Pierluigi Paganini June 01, 2026 The Pentagon confirmed adversaries are using commercial location data…
Security Affairs newsletter Round 579 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 579 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini May 31, 2026 A new round of the weekly Security Affairs newsletter…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 99
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Ghost CMS Mass Compromised…
CVE-2026-0257: Rapid7 Caught Attackers Abusing Forged VPN Cookies Against Multiple Customers
CVE-2026-0257: Rapid7 Caught Attackers Abusing Forged VPN Cookies Against Multiple Customers Pierluigi Paganini May 31, 2026 CVE-2026-0257 lets attackers forge Palo Alto GlobalProtect auth cookies…
ShinyHunters Leaks Charter Communications Data, Potentially Impacting 5 Million Customers
ShinyHunters Leaks Charter Communications Data, Potentially Impacting 5 Million Customers Pierluigi Paganini May 30, 2026 Cybercrime group ShinyHunters leaked data allegedly stolen from Charter Communications,…
Signal Phishing Campaign Targets Journalists and Activists to Steal Backup Recovery Keys
Signal Phishing Campaign Targets Journalists and Activists to Steal Backup Recovery Keys Pierluigi Paganini May 30, 2026 Attackers are texting Signal users posing as Support,…
Botnet of 17 Million Devices Dismantled in the Netherlands
Botnet of 17 Million Devices Dismantled in the Netherlands Pierluigi Paganini May 30, 2026 Dutch authorities seized 200 servers running a 17-million-device botnet linked to…