Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites
Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites Pierluigi Paganini May 25, 2026 Threat actors are actively exploiting a security flaw,…
Category: Securityaffairs
Zero-Click WhatsApp Account Takeover Hits iPhone Users Running iOS 16. No Linked Devices, No Warning
Zero-Click WhatsApp Account Takeover Hits iPhone Users Running iOS 16. No Linked Devices, No Warning Pierluigi Paganini May 25, 2026 A zero-click attack targeting iPhones…
Dutch authorities dismantle hosting network allegedly used for cyberattacks and disinformation
Dutch authorities dismantle hosting network allegedly used for cyberattacks and disinformation Pierluigi Paganini May 25, 2026 Dutch authorities arrested two suspects and seized 800 servers…
U.S. CISA adds a flaw in Drupal Core to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in Drupal Core to its Known Exploited Vulnerabilities catalog Pierluigi Paganini May 24, 2026 The U.S. Cybersecurity and Infrastructure Security…
Security Affairs newsletter Round 578 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 578 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini May 24, 2026 A new round of the weekly Security Affairs newsletter…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 98
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Popular node-ipc npm Package…
Anthropic’s Glasswing: 10,000+ Vulnerabilities Found in One Month, and the Patching Problem Has Never Been More Obvious
Anthropic’s Project Glasswing: 10,000+ Vulnerabilities Found in One Month, and the Patching Problem Has Never Been More Obvious Pierluigi Paganini May 24, 2026 Anthropic said…
CVE-2026-9082: Drupal’s Highly Critical SQL Injection Flaw Is Already Under Active Attack
CVE-2026-9082: Drupal’s Highly Critical SQL Injection Flaw Is Already Under Active Attack Pierluigi Paganini May 23, 2026 Attackers began exploiting Drupal SQL injection flaw CVE-2026-9082…
Why pure extortion is replacing traditional ransomware
Why pure extortion is replacing traditional ransomware Pierluigi Paganini May 23, 2026 Ransomware gangs are shifting from encryption to pure extortion, focusing on stolen data,…
Ghostwriter Is Back, Using a Ukrainian Learning Platform as Bait to Hit Government Targets
Ghostwriter Is Back, Using a Ukrainian Learning Platform as Bait to Hit Government Targets Pierluigi Paganini May 23, 2026 Ghostwriter targeted Ukrainian government agencies with…
Cisco fixed maximum severity flaw CVE-2026-20223 in Secure Workload
Cisco fixed maximum severity flaw CVE-2026-20223 in Secure Workload Pierluigi Paganini May 21, 2026 Cisco fixed a critical Secure Workload flaw (CVE-2026-20223) that could let…
One Telecom Provider Hosted Most of the Middle East ’s Active C2 Infrastructure
One Telecom Provider Hosted Most of the Middle East ’s Active C2 Infrastructure Pierluigi Paganini May 22, 2026 Hunt.io mapped 1,350+ C2 servers across the…