SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 106
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter CrashStealer: C++ macOS infostealer…
Category: Securityaffairs
Attackers Can Take Over WordPress Sites Using Newly Released wp2shell Exploits
Attackers Can Take Over WordPress Sites Using Newly Released wp2shell Exploits Pierluigi Paganini July 19, 2026 Public exploits are now available for two critical WordPress…
OpenSSL Fixes HollowByte Memory Exhaustion Bug
OpenSSL Fixes HollowByte Memory Exhaustion Bug Pierluigi Paganini July 18, 2026 Okta disclosed HollowByte, an 11-byte OpenSSL flaw that lets remote attackers exhaust server memory…
Daxin: 13-Year-Old China-Linked Malware Found Still Active on Manufacturer’s Network
Daxin: 13-Year-Old China-Linked Malware Found Still Active on Manufacturer’s Network Pierluigi Paganini July 18, 2026 Researchers found China’s Daxin rootkit and a new Stupig backdoor…
U.S. CISA adds Fortinet FortiSandbox and Microsoft SharePoint flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Fortinet FortiSandbox and Microsoft SharePoint flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini July 18, 2026 U.S. Cybersecurity and Infrastructure Security…
A cyberattack hit Nichirei, one of Japan’s largest food companies
A cyberattack hit Nichirei, one of Japan’s largest food companies Pierluigi Paganini July 17, 2026 A cyberattack hit one of Japan’s largest food companies, Nichirei,…
Ernst & Young (EY) Investigates Data Breach Involving Third-Party Support Tickets
Ernst & Young (EY) Investigates Data Breach Involving Third-Party Support Tickets Pierluigi Paganini July 17, 2026 Ernst & Young (EY) disclosed a data breach after…
U.S. CISA adds KNX Association KNX Protocol Connection Authorization Option 1 and Oracle flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds KNX Association KNX Protocol Connection Authorization Option 1 and Oracle flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini July 17, 2026…
New Russian Campaign Uses Fake Webex and Zoom Installers to Deploy Starland RAT
New Russian Campaign Uses Fake Webex and Zoom Installers to Deploy Starland RAT Pierluigi Paganini July 17, 2026 Russian-speaking UAT-11795 spreads trojanized Zoom, Webex, and…
Two Scattered Spider Members Sentenced to Prison Over £29 Million TfL Cyberattack
Two Scattered Spider Members Sentenced to Prison Over £29 Million TfL Cyberattack Pierluigi Paganini July 16, 2026 Two members of the Scattered Spider cybercrime group…
Claude Code and DeepSeek Powered Chinese Cyber Espionage Campaign
Claude Code and DeepSeek Powered Chinese Cyber Espionage Campaign Pierluigi Paganini July 16, 2026 Chinese actors used Claude Code and DeepSeek to automate attacks that…
TuxBot v3: The IoT Botnet Built With AI
TuxBot v3: The IoT Botnet Built With AI – Bugs, Disclaimers and All Pierluigi Paganini July 16, 2026 TuxBot v3, an AI-built IoT botnet for…