Russian APTs Still Exploiting Patched WinRAR Flaw CVE-2025-8088
Russian APTs Still Exploiting Patched WinRAR Flaw CVE-2025-8088 Pierluigi Paganini June 10, 2026 Despite a 2025 patch, Russian-linked groups still exploit a WinRAR flaw (CVE-2025-8088)…
Category: Securityaffairs
U.S. CISA adds Cisco Catalyst SD-WAN, Arista Extensible Operating System (EOS), and Google Chromium V8 flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Cisco Catalyst SD-WAN, Arista Extensible Operating System (EOS), and Google Chromium V8 flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June…
Miasma Worm Compromises 73 Microsoft GitHub Repositories
Miasma Worm Compromises 73 Microsoft GitHub Repositories Pierluigi Paganini June 09, 2026 The Miasma worm compromised 73 Microsoft GitHub repos, spreading via AI coding tools…
Microsoft Releases Record-Breaking Patch Tuesday With 208 CVEs
Microsoft Releases Record-Breaking Patch Tuesday With 208 CVEs Pierluigi Paganini June 09, 2026 Microsoft Patch Tuesday security updates for June 2026 fix a record 208…
Critical Veeam RCE flaw Lets Low-Privilege Users Take Over Backup Servers
Critical Veeam RCE Flaw Lets Low-Privilege Users Take Over Backup Servers Pierluigi Paganini June 09, 2026 Veeam addressed a critical RCE vulnerability flaw in Backup…
U.S. CISA adds BerriAI LiteLLM and Check Point Security Gateway flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds BerriAI LiteLLM and Check Point Security Gateway flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 09, 2026 U.S. Cybersecurity and…
Google fixes fifth actively exploited Chrome zero-day of 2026
Google fixes the fifth actively exploited Chrome zero-day of 2026 Pierluigi Paganini June 09, 2026 Google fixed a new Chrome zero-day, tracked as CVE-2026-11645, in…
IoT Botnet C0XMO Adds Competitor-Killing Capability
IoT Botnet C0XMO Adds Competitor-Killing Capability Pierluigi Paganini June 08, 2026 C0XMO is a new Gafgyt botnet variant exploiting old router flaws, spreading across IoT…
Meta Accuses NSO of Violating WhatsApp Court Injunction
Meta Accuses NSO of Violating WhatsApp Court Injunction Pierluigi Paganini June 08, 2026 Meta says NSO violated a court injunction by targeting WhatsApp users again…
Meta AI Recovery Tool Flaw Exposed 20,000+ Instagram Accounts
Meta AI Recovery Tool Flaw Exposed 20,000+ Instagram Accounts Pierluigi Paganini June 08, 2026 A flaw in Meta’s AI-powered Instagram recovery tool exposed over 20,000…
Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access
Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access Pierluigi Paganini June 08, 2026 Hackers exploit CVE-2026-3300 in Everest Forms Pro to inject PHP…
UNC3753 Escalates: From Vishing Calls to Physical Office Intrusions at US Legal and Financial Firms
UNC3753 Escalates: From Vishing Calls to Physical Office Intrusions at US Legal and Financial Firms Pierluigi Paganini June 08, 2026 UNC3753 phones staff posing as…