Critical flaw in Apache Parquet’s Java Library allows remote code execution Pierluigi Paganini April 04, 2025 Experts warn of a critical vulnerability impacting Apache Parquet’s…
CERT-UA reports attacks in March 2025 targeting Ukrainian agencies with WRECKSTEEL Malware Pierluigi Paganini April 04, 2025 CERT-UA reported three cyberattacks targeting Ukraine’s state agencies…
39M secrets exposed: GitHub rolls out new security tools Pierluigi Paganini April 04, 2025 GitHub found 39M secrets leaked in 2024 and launched new tools…
China-linked group UNC5221 exploited Ivanti Connect Secure zero-day since mid-March Pierluigi Paganini April 03, 2025 Ivanti addressed a critical remote code execution flaw in Connect…
Europol-led operation shuts down CSAM platform Kidflix, leading to 79 arrests Pierluigi Paganini April 03, 2025 An international law enforcement operation shuts down Kidflix, a…
New Triada Trojan comes preinstalled on Android devices Pierluigi Paganini April 03, 2025 A new Triada trojan variant comes preinstalled on Android devices, stealing data…
New advanced FIN7’s Anubis backdoor allows to gain full system control on Windows Pierluigi Paganini April 02, 2025 FIN7 cybercrime group has been linked to…
U.S. CISA adds Apache Tomcat flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini April 02, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds…
Apple backported fixes for three actively exploited flaws to older devices Pierluigi Paganini April 02, 2025 Apple backports three critical vulnerabilities actively exploited in attacks…
Spike in Palo Alto Networks scanner activity suggests imminent cyber threats Pierluigi Paganini April 02, 2025 Hackers are scanning for vulnerabilities in Palo Alto Networks…
Microsoft warns of critical flaw in Canon printer drivers Pierluigi Paganini April 01, 2025 Microsoft’s offensive security team discovered a critical code execution vulnerability impacting…
CrushFTP CVE-2025-2825 flaw actively exploited in the wild Pierluigi Paganini April 01, 2025 Attackers exploit CrushFTP CVE-2025-2825 flaw, enabling unauthenticated access to unpatched devices using…
