Critical Flaw in NASA/JPL Open-Source Spacecraft Command Software Allowed Unauthenticated Command Execution Pierluigi Paganini August 22, 2026 A critical flaw (CVSS 9.4) in NASA/JPL’s AIT-GUI…
GitLab Warns of Active Exploitation of Critical GraphQL Flaw Pierluigi Paganini August 21, 2026 GitLab flaw CVE-2026-19478 is now under active exploitation, allowing unauthenticated attackers…
Fake Conferences, OAuth and WhatsApp: Inside Russia’s New Espionage Tactics Pierluigi Paganini August 21, 2026 Google tracks three Russia-linked espionage clusters using phishing and legitimate…
Your Shredded Visa Card May Still Work at the Checkout Pierluigi Paganini August 21, 2026 UMass Amherst researchers showed expired Visa contactless cards can make…
Six Maximum-Severity Flaws Found in Cisco Products Pierluigi Paganini August 21, 2026 Cisco patched nine critical flaws, including six rated CVSS 10.0, found during internal…
Poland’s CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw Pierluigi Paganini August 21, 2026 CERT Polska confirmed active exploitation of CVE-2026-73570, a…
U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 20, 2026 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds…
NSA, CISA, FBI, DOE, and EPA Warn of Active AI-Assisted Attacks on Siemens S7 PLCs Pierluigi Paganini August 20, 2026 NSA, CISA, FBI, DOE, and…
Manic: The Android Malware That Exfiltrates Data Even When the Phone Is Offline Pierluigi Paganini August 20, 2026 Manic Android malware combines banking fraud and…
U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 19, 2026 U.S.…
Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras Pierluigi Paganini August 19, 2026 An exposed operator directory reveals how one actor compromised…
50,000 Stripe Secrets Leaked in Public Code Pierluigi Paganini August 19, 2026 Over 50,000 exposed Stripe API keys show how leaked secrets can enable fraud,…
