the US, China, and the EU are among the top exploited GEOs
MongoBleed (CVE-2025-14847): the US, China, and the EU are among the top exploited GEOs Pierluigi Paganini December 31, 2025 MongoBleed (CVE-2025-14847) lets attackers remotely leak…
Category: Securityaffairs
Coupang announces $1.17B compensation plan for 33.7M data breach victims
Coupang announces $1.17B compensation plan for 33.7M data breach victims Pierluigi Paganini December 30, 2025 Coupang will spend about $1.17B to compensate 33.7 million users…
Mustang Panda deploys ToneShell via signed kernel-mode rootkit driver
Mustang Panda deploys ToneShell via signed kernel-mode rootkit driver Pierluigi Paganini December 30, 2025 China-linked APT Mustang Panda used a signed kernel-mode rootkit driver to…
Lithuanian suspect arrested over KMSAuto malware that infected 2.8M systems
Lithuanian suspect arrested over KMSAuto malware that infected 2.8M systems Pierluigi Paganini December 30, 2025 A Lithuanian national was arrested for allegedly spreading KMSAuto malware…
U.S. CISA adds a flaw in MongoDB Server to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in MongoDB Server to its Known Exploited Vulnerabilities catalog Pierluigi Paganini December 30, 2025 U.S. Cybersecurity and Infrastructure Security Agency…
Romania’s Oltenia Energy Complex suffers major ransomware attack
Romania’s Oltenia Energy Complex suffers major ransomware attack Pierluigi Paganini December 29, 2025 A ransomware attack hit Romania’s Oltenia Energy Complex on December 26, knocking…
Korean Air discloses data breach after the hack of its catering and duty-free supplier
Korean Air discloses data breach after the hack of its catering and duty-free supplier Pierluigi Paganini December 29, 2025 Korean Air employee discloses a data…
MongoBleed flaw actively exploited in attacks in the wild
MongoBleed flaw actively exploited in attacks in the wild Pierluigi Paganini December 29, 2025 A recently disclosed MongoDB flaw (MongoBleed) is under active exploitation, with…
Evasive Panda cyberespionage campaign uses DNS poisoning to install MgBot backdoor
Evasive Panda cyberespionage campaign uses DNS poisoning to install MgBot backdoor Pierluigi Paganini December 29, 2025 China-linked APT Evasive Panda used DNS poisoning to deliver…
2.3M WIRED records leaked, 40M more at risk
Condé Nast faces major data breach: 2.3M WIRED records leaked, 40M more at risk Pierluigi Paganini December 28, 2025 Hacker claims Condé Nast breach, leaking…
Stolen LastPass backups enable crypto theft through 2025
Stolen LastPass backups enable crypto theft through 2025 Pierluigi Paganini December 28, 2025 Stolen vault backups from the 2022 LastPass breach are still being cracked,…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 77
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Choose Your Fighter: A…