Category: Securityaffairs

Experts found an unsecured 16TB database containing 4.3B professional records
14
Dec
2025

Experts found an unsecured 16TB database containing 4.3B professional records

Experts found an unsecured 16TB database containing 4.3B professional records Pierluigi Paganini December 14, 2025 An open 16TB database exposed…

Germany calls in Russian Ambassador over air traffic control hack claims
13
Dec
2025

Germany calls in Russian Ambassador over air traffic control hack claims

Germany calls in Russian Ambassador over air traffic control hack claims Pierluigi Paganini December 13, 2025 Germany summoned Russia’s ambassador…

Spyware and RATs used to target WhatsApp and Signal Users
13
Dec
2025

U.S. CISA adds Google Chromium and Sierra Wireless AirLink ALEOS flaws to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Google Chromium and Sierra Wireless AirLink ALEOS flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini December…

Apple addressed the seventh actively exploited zero-day
13
Dec
2025

Emergency fixes deployed by Google and Apple after targeted attacks

Emergency fixes deployed by Google and Apple after targeted attacks Pierluigi Paganini December 13, 2025 Google and Apple issued emergency…

Notepad++ fixed updater bugs that allowed malicious update hijacking
13
Dec
2025

Notepad++ fixed updater bugs that allowed malicious update hijacking

Notepad++ fixed updater bugs that allowed malicious update hijacking Pierluigi Paganini December 12, 2025 Notepad++ addressed an updater vulnerability that…

Elastic detects stealthy NANOREMOTE malware using Google Drive as C2
12
Dec
2025

Elastic detects stealthy NANOREMOTE malware using Google Drive as C2

Elastic detects stealthy NANOREMOTE malware using Google Drive as C2 Pierluigi Paganini December 12, 2025 Elastic found a new Windows…

Spyware and RATs used to target WhatsApp and Signal Users
12
Dec
2025

U.S. CISA adds an OSGeo GeoServer flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds an OSGeo GeoServer flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini December 12, 2025 U.S. Cybersecurity…

Critical Gogs zero-day under attack, 700 servers hacked
12
Dec
2025

Critical Gogs zero-day under attack, 700 servers hacked

Critical Gogs zero-day under attack, 700 servers hacked Pierluigi Paganini December 11, 2025 Hackers exploited an unpatched Gogs zero-day, allowing…

Google sues cybercriminal group Smishing Triad
12
Dec
2025

GeminiJack zero-click flaw in Gemini Enterprise allowed corporate data exfiltration

GeminiJack zero-click flaw in Gemini Enterprise allowed corporate data exfiltration Pierluigi Paganini December 11, 2025 Google fixed GeminiJack, a zero-click…

Google fixed the seventh Chrome zero-day in 2025
11
Dec
2025

Google fixed a new actively exploited Chrome zero-day

Google fixed a new actively exploited Chrome zero-day Pierluigi Paganini December 11, 2025 Google addressed three vulnerabilities in the Chrome…

Russia-linked APT Laundry Bear linked to 2024 Dutch Police attack
11
Dec
2025

Pro-Russia Hacktivist Support: Ukrainian Faces US Charges

Pro-Russia Hacktivist Support: Ukrainian Faces US Charges Pierluigi Paganini December 11, 2025 Ukrainian Victoria Dubranova, 33, faces US charges for…

Critical FortiWeb flaw under attack, allowing complete compromise
11
Dec
2025

Fortinet fixed two critical authentication-bypass vulnerabilities

Fortinet fixed two critical authentication-bypass vulnerabilities Pierluigi Paganini December 10, 2025 Fortinet patched 18 flaws, including two authentication-bypass bugs affecting…