Security Affairs newsletter Round 556 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email…
Category: Securityaffairs
LangChain core vulnerability allows prompt injection and data exposure
LangChain core vulnerability allows prompt injection and data exposure Pierluigi Paganini December 27, 2025 A critical flaw in LangChain Core could allow attackers to steal…
NPM package with 56,000 downloads compromises WhatsApp accounts
NPM package with 56,000 downloads compromises WhatsApp accounts Pierluigi Paganini December 27, 2025 An NPM package with over 56,000 downloads stole WhatsApp credentials, hid its…
Trust Wallet warns users to update Chrome extension after $7M security loss
Trust Wallet warns users to update Chrome extension after $7M security loss Pierluigi Paganini December 26, 2025 Trust Wallet urged users to update its Chrome…
Pro-Russian group Noname057 claims cyberattack on La Poste services
Pro-Russian group Noname057 claims cyberattack on La Poste services Pierluigi Paganini December 26, 2025 Pro-Russian hacking group Noname057 claimed responsibility for the cyberattack that recently…
Aflac confirms June data breach affecting over 22 million customers
Aflac confirms June data breach affecting over 22 million customers Pierluigi Paganini December 26, 2025 A June data breach exposed the personal information of more…
Spotify cracks down on unlawful scraping of 86 million songs
Spotify cracks down on unlawful scraping of 86 million songs Pierluigi Paganini December 26, 2025 Spotify shut down accounts after Anna’s Archive scraped and published…
Five-year-old Fortinet FortiOS SSL VPN flaw actively exploited
Five-year-old Fortinet FortiOS SSL VPN vulnerability actively exploited Pierluigi Paganini December 25, 2025 Fortinet reported active exploitation of a five-year-old FortiOS SSL VPN flaw, abused…
High-severity MongoDB flaw CVE-2025-14847 could lead to server takeover
High-severity MongoDB flaw CVE-2025-14847 could lead to server takeover Pierluigi Paganini December 25, 2025 MongoDB addressed a high-severity vulnerability that can be exploited to achieve…
FBI seized ‘web3adspanels.org’ hosting stolen logins
FBI seized ‘web3adspanels.org’ hosting stolen logins Pierluigi Paganini December 24, 2025 The U.S. seized the ‘web3adspanels.org’ domain and database used by cybercriminals to store stolen…
U.S. Federal Communications Commission (FCC) bans foreign-made drones over national security concerns
U.S. Federal Communications Commission (FCC) bans foreign-made drones over national security concerns Pierluigi Paganini December 24, 2025 The FCC announced a ban on drones and…
Italian regulator rules Apple’s ATT feature limits competition
Italian regulator rules Apple’s ATT feature limits competition Pierluigi Paganini December 24, 2025 Italy fined Apple €98.6 million, ruling its App Tracking Transparency feature limited…