Misconfigured email routing enables internal-spoofed phishing Pierluigi Paganini January 07, 2026 Attackers exploit misconfigured email routing to spoof internal emails, using PhaaS platforms like Tycoon2FA…
Veeam resolves CVSS 9.0 RCE flaw and other security issues Pierluigi Paganini January 07, 2026 Veeam patched a critical RCE flaw in Backup & Replication,…
Hackers actively exploit critical RCE flaw in legacy D-Link DSL routers Pierluigi Paganini January 07, 2026 Attackers are exploiting a critical flaw (CVE-2026-0625) in old…
Fake Booking.com lures and BSoD scams spread DCRat in European hospitality sector Pierluigi Paganini January 07, 2026 PHALT#BLYX targets European hotels with fake Booking emails…
CERT/CC warns of critical, unfixed vulnerability in TOTOLINK EX200 Pierluigi Paganini January 06, 2026 CERT/CC disclosed an unpatched flaw in the TOTOLINK EX200 that allows…
Google fixes critical Dolby Decoder bug in Android January update Pierluigi Paganini January 06, 2026 Android’s January 2026 update fixes CVE-2025-54957, a critical Dolby audio…
Resecurity Went on the Cyber Offensive – When ‘Shiny Objects’ trick ‘Shiny Hunters’ Pierluigi Paganini January 06, 2026 Resecurity released 105 pages with 1,000+ messages…
Russia-linked APT UAC-0184 uses Viber to spy on Ukrainian military in 2025 Pierluigi Paganini January 05, 2026 Russia-linked APT UAC-0184 targets Ukrainian military and government…
Kimwolf botnet leverages residential proxies to hijack 2M+ Android devices Pierluigi Paganini January 05, 2026 The Kimwolf botnet has infected over 2 million Android devices,…
The cybercriminal behind the 2016 Bitfinex hack has been released from prison early thanks to Trump’s 2018 First Step Act Pierluigi Paganini January 05, 2026…
VVS Stealer, a new python malware steals Discord credentials Pierluigi Paganini January 05, 2026 VVS Stealer is a Python-based malware that steals Discord credentials and…
Sedgwick discloses data breach after TridentLocker ransomware attack Pierluigi Paganini January 05, 2026 Sedgwick confirmed a cyber incident at its federal contractor unit after TridentLocker…
