Category: Securityaffairs

Dormakaba flaws allow to access major organizations’ doors
27
Jan
2026

Dormakaba flaws allow to access major organizations’ doors

Dormakaba flaws allow to access major organizations’ doors Pierluigi Paganini January 27, 2026 Researchers found over 20 flaws in Dormakaba…

Share: X : Dormakaba flaws allow to access major organizations’ doorsFacebook : Dormakaba flaws allow to access major organizations’ doorsLinkedin : Dormakaba flaws allow to access major organizations’ doorsReddit : Dormakaba flaws allow to access major organizations’ doorsTelegram : Dormakaba flaws allow to access major organizations’ doorsWhatsApp : Dormakaba flaws allow to access major organizations’ doorsEmail : Dormakaba flaws allow to access major organizations’ doors
Microsoft revokes 200+ certificates abused by Vanilla Tempest in fake Teams campaign
26
Jan
2026

Emergency Microsoft update fixes in-the-wild Office zero-day

Emergency Microsoft update fixes in-the-wild Office zero-day Pierluigi Paganini January 26, 2026 Microsoft issued emergency updates to fix an actively…

Share: X : Emergency Microsoft update fixes in-the-wild Office zero-dayFacebook : Emergency Microsoft update fixes in-the-wild Office zero-dayLinkedin : Emergency Microsoft update fixes in-the-wild Office zero-dayReddit : Emergency Microsoft update fixes in-the-wild Office zero-dayTelegram : Emergency Microsoft update fixes in-the-wild Office zero-dayWhatsApp : Emergency Microsoft update fixes in-the-wild Office zero-dayEmail : Emergency Microsoft update fixes in-the-wild Office zero-day
ShinyHunters claims 2 Million Crunchbase records; company confirms breach
26
Jan
2026

ShinyHunters claims 2 Million Crunchbase records; company confirms breach

ShinyHunters claims 2 Million Crunchbase records; company confirms breach Pierluigi Paganini January 26, 2026 Crunchbase confirms a data breach after…

Share: X : ShinyHunters claims 2 Million Crunchbase records; company confirms breachFacebook : ShinyHunters claims 2 Million Crunchbase records; company confirms breachLinkedin : ShinyHunters claims 2 Million Crunchbase records; company confirms breachReddit : ShinyHunters claims 2 Million Crunchbase records; company confirms breachTelegram : ShinyHunters claims 2 Million Crunchbase records; company confirms breachWhatsApp : ShinyHunters claims 2 Million Crunchbase records; company confirms breachEmail : ShinyHunters claims 2 Million Crunchbase records; company confirms breach
Energy sector targeted in multi-stage phishing and BEC campaign using SharePoint
26
Jan
2026

Energy sector targeted in multi-stage phishing and BEC campaign using SharePoint

Energy sector targeted in multi-stage phishing and BEC campaign using SharePoint Pierluigi Paganini January 26, 2026 Microsoft warns of a…

Share: X : Energy sector targeted in multi-stage phishing and BEC campaign using SharePointFacebook : Energy sector targeted in multi-stage phishing and BEC campaign using SharePointLinkedin : Energy sector targeted in multi-stage phishing and BEC campaign using SharePointReddit : Energy sector targeted in multi-stage phishing and BEC campaign using SharePointTelegram : Energy sector targeted in multi-stage phishing and BEC campaign using SharePointWhatsApp : Energy sector targeted in multi-stage phishing and BEC campaign using SharePointEmail : Energy sector targeted in multi-stage phishing and BEC campaign using SharePoint
North Korea–linked KONNI uses AI to build stealthy malware tooling
26
Jan
2026

North Korea–linked KONNI uses AI to build stealthy malware tooling

North Korea–linked KONNI uses AI to build stealthy malware tooling Pierluigi Paganini January 26, 2026 Check Point links an active…

Share: X : North Korea–linked KONNI uses AI to build stealthy malware toolingFacebook : North Korea–linked KONNI uses AI to build stealthy malware toolingLinkedin : North Korea–linked KONNI uses AI to build stealthy malware toolingReddit : North Korea–linked KONNI uses AI to build stealthy malware toolingTelegram : North Korea–linked KONNI uses AI to build stealthy malware toolingWhatsApp : North Korea–linked KONNI uses AI to build stealthy malware toolingEmail : North Korea–linked KONNI uses AI to build stealthy malware tooling
Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power grid
26
Jan
2026

Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power grid

Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power grid Pierluigi Paganini January 26, 2026 Russia-linked APT Sandworm…

Share: X : Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power gridFacebook : Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power gridLinkedin : Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power gridReddit : Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power gridTelegram : Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power gridWhatsApp : Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power gridEmail : Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power grid
Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power grid
26
Jan
2026

Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power grid

Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power grid Pierluigi Paganini January 26, 2026 Russia-linked APT Sandworm…

Share: X : Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power gridFacebook : Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power gridLinkedin : Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power gridReddit : Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power gridTelegram : Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power gridWhatsApp : Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power gridEmail : Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power grid
Nike is investigating a possible data breach, after WorldLeaks claims
25
Jan
2026

Nike is investigating a possible data breach, after WorldLeaks claims

Nike is investigating a possible data breach, after WorldLeaks claims Pierluigi Paganini January 25, 2026 Nike is investigating a possible…

Share: X : Nike is investigating a possible data breach, after WorldLeaks claimsFacebook : Nike is investigating a possible data breach, after WorldLeaks claimsLinkedin : Nike is investigating a possible data breach, after WorldLeaks claimsReddit : Nike is investigating a possible data breach, after WorldLeaks claimsTelegram : Nike is investigating a possible data breach, after WorldLeaks claimsWhatsApp : Nike is investigating a possible data breach, after WorldLeaks claimsEmail : Nike is investigating a possible data breach, after WorldLeaks claims
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 70
25
Jan
2026

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 81

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware…

Share: X : SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 81Facebook : SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 81Linkedin : SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 81Reddit : SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 81Telegram : SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 81WhatsApp : SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 81Email : SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 81
Security Affairs newsletter Round 549 by Pierluigi Paganini – INTERNATIONAL EDITION
25
Jan
2026

Security Affairs newsletter Round 560 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs…

Share: X : Security Affairs newsletter Round 560 by Pierluigi Paganini – INTERNATIONAL EDITIONFacebook : Security Affairs newsletter Round 560 by Pierluigi Paganini – INTERNATIONAL EDITIONLinkedin : Security Affairs newsletter Round 560 by Pierluigi Paganini – INTERNATIONAL EDITIONReddit : Security Affairs newsletter Round 560 by Pierluigi Paganini – INTERNATIONAL EDITIONTelegram : Security Affairs newsletter Round 560 by Pierluigi Paganini – INTERNATIONAL EDITIONWhatsApp : Security Affairs newsletter Round 560 by Pierluigi Paganini – INTERNATIONAL EDITIONEmail : Security Affairs newsletter Round 560 by Pierluigi Paganini – INTERNATIONAL EDITION
Ohio’s Union County suffers ransomware attack impacting 45,000 people
24
Jan
2026

Osiris ransomware emerges, leveraging BYOVD technique to kill security tools

Osiris ransomware emerges, leveraging BYOVD technique to kill security tools Pierluigi Paganini January 24, 2026 Researchers identified a new Osiris…

Share: X : Osiris ransomware emerges, leveraging BYOVD technique to kill security toolsFacebook : Osiris ransomware emerges, leveraging BYOVD technique to kill security toolsLinkedin : Osiris ransomware emerges, leveraging BYOVD technique to kill security toolsReddit : Osiris ransomware emerges, leveraging BYOVD technique to kill security toolsTelegram : Osiris ransomware emerges, leveraging BYOVD technique to kill security toolsWhatsApp : Osiris ransomware emerges, leveraging BYOVD technique to kill security toolsEmail : Osiris ransomware emerges, leveraging BYOVD technique to kill security tools
U.S. CISA adds Prettier eslint-config-prettier, Vite Vitejs, Versa Concerto SD-WAN orchestration platform and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog
24
Jan
2026

U.S. CISA adds a flaw in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalog

U.S. CISA adds a flaw in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalog Pierluigi Paganini January 24,…

Share: X : U.S. CISA adds a flaw in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalogFacebook : U.S. CISA adds a flaw in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalogLinkedin : U.S. CISA adds a flaw in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalogReddit : U.S. CISA adds a flaw in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalogTelegram : U.S. CISA adds a flaw in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalogWhatsApp : U.S. CISA adds a flaw in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalogEmail : U.S. CISA adds a flaw in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalog