Covenant Health data breach after ransomware attack impacted over 478,000 people Pierluigi Paganini January 02, 2026 Covenant Health suffered a ransomware attack by the Qilin…
Phishing campaign abuses Google Cloud Application to impersonate legitimate Google emails Pierluigi Paganini January 02, 2026 Researchers uncovered a phishing campaign abusing Google Cloud Application…
IBM warns of critical API Connect bug enabling remote access Pierluigi Paganini January 02, 2026 IBM disclosed a critical API Connect flaw (CVE-2025-13915, CVSS 9.8)…
Trust Wallet confirms second Shai-Hulud supply-chain attack, $8.5M in crypto stolen Pierluigi Paganini January 01, 2026 Trust Wallet says a second Shai-Hulud supply-chain attack likely…
React2Shell under attack: RondoDox Botnet spreads miners and malware Pierluigi Paganini January 01, 2026 RondoDox botnet exploits the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable…
ESA disclosed a data breach, hackers breached external servers Pierluigi Paganini December 31, 2025 ESA confirmed a data breach after a hacker offered to sell…
Singapore CSA warns of maximun severity SmarterMail RCE flaw Pierluigi Paganini December 31, 2025 Singapore’s CSA warns of CVE-2025-52691, a critical SmarterMail flaw enabling unauthenticated…
MongoBleed (CVE-2025-14847): the US, China, and the EU are among the top exploited GEOs Pierluigi Paganini December 31, 2025 MongoBleed (CVE-2025-14847) lets attackers remotely leak…
Coupang announces $1.17B compensation plan for 33.7M data breach victims Pierluigi Paganini December 30, 2025 Coupang will spend about $1.17B to compensate 33.7 million users…
Mustang Panda deploys ToneShell via signed kernel-mode rootkit driver Pierluigi Paganini December 30, 2025 China-linked APT Mustang Panda used a signed kernel-mode rootkit driver to…
Lithuanian suspect arrested over KMSAuto malware that infected 2.8M systems Pierluigi Paganini December 30, 2025 A Lithuanian national was arrested for allegedly spreading KMSAuto malware…
U.S. CISA adds a flaw in MongoDB Server to its Known Exploited Vulnerabilities catalog Pierluigi Paganini December 30, 2025 U.S. Cybersecurity and Infrastructure Security Agency…
