SolarWinds addressed four critical Web Help Desk flaws
SolarWinds addressed four critical Web Help Desk flaws Pierluigi Paganini January 29, 2026 SolarWinds patched six Web Help Desk vulnerabilities, including four critical flaws exploitable…
Category: Securityaffairs
Google targets IPIDEA in crackdown on global residential proxy networks
Google targets IPIDEA in crackdown on global residential proxy networks Pierluigi Paganini January 29, 2026 Google disrupted IPIDEA, a major residential proxy network that enrolled…
Nation-state and criminal actors leverage WinRAR flaw in attacks
Nation-state and criminal actors leverage WinRAR flaw in attacks Pierluigi Paganini January 29, 2026 Multiple threat actors exploited a now-patched critical WinRAR flaw to gain…
OpenSSL issued security updates to fix 12 flaws, including Remote Code Execution
OpenSSL issued security updates to fix 12 flaws, including Remote Code Execution Pierluigi Paganini January 29, 2026 OpenSSL released security updates that address 12 flaws,…
U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog Pierluigi Paganini January 28, 2026 The U.S. Cybersecurity and Infrastructure…
PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun
PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun Pierluigi Paganini January 28, 2026 Koi researchers found “PackageGate” flaws in NPM, PNPM,…
WhatsApp rolls out Strict Account settings to strengthen protection for high-risk users
WhatsApp rolls out Strict Account settings to strengthen protection for high-risk users Pierluigi Paganini January 27, 2026 Meta announced new Strict Account Settings on WhatsApp…
Shadowserver finds 6,000+ likely vulnerable SmarterMail servers exposed online
Shadowserver finds 6,000+ likely vulnerable SmarterMail servers exposed online Pierluigi Paganini January 27, 2026 Shadowserver researchers found 6,000+ SmarterMail servers exposed online and likely vulnerable…
U.S. CISA adds Microsoft Office, GNU InetUtils, SmarterTools SmarterMail, and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Microsoft Office, GNU InetUtils, SmarterTools SmarterMail, and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini January 27, 2026 U.S. Cybersecurity…
Amnesia RAT deployed in multi-stage phishing attacks against Russian users
Amnesia RAT deployed in multi-stage phishing attacks against Russian users Pierluigi Paganini January 27, 2026 A multi-stage phishing campaign targets users in Russia with ransomware…
Dormakaba flaws allow to access major organizations’ doors
Dormakaba flaws allow to access major organizations’ doors Pierluigi Paganini January 27, 2026 Researchers found over 20 flaws in Dormakaba access systems that could let…
Emergency Microsoft update fixes in-the-wild Office zero-day
Emergency Microsoft update fixes in-the-wild Office zero-day Pierluigi Paganini January 26, 2026 Microsoft issued emergency updates to fix an actively exploited Office zero-day, CVE-2026-21509, affecting…