Emergency Microsoft update fixes in-the-wild Office zero-day Pierluigi Paganini January 26, 2026 Microsoft issued emergency updates to fix an actively exploited Office zero-day, CVE-2026-21509, affecting…
ShinyHunters claims 2 Million Crunchbase records; company confirms breach Pierluigi Paganini January 26, 2026 Crunchbase confirms a data breach after cybercrime group ShinyHunters claims to…
Energy sector targeted in multi-stage phishing and BEC campaign using SharePoint Pierluigi Paganini January 26, 2026 Microsoft warns of a multi-stage phishing and BEC campaign…
North Korea–linked KONNI uses AI to build stealthy malware tooling Pierluigi Paganini January 26, 2026 Check Point links an active phishing campaign to North Korea–aligned…
Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power grid Pierluigi Paganini January 26, 2026 Russia-linked APT Sandworm launched what was described as…
Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power grid Pierluigi Paganini January 26, 2026 Russia-linked APT Sandworm launched what was described as…
Nike is investigating a possible data breach, after WorldLeaks claims Pierluigi Paganini January 25, 2026 Nike is investigating a possible cyber incident after the WorldLeaks…
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter UNO reverse card: stealing…
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email…
Osiris ransomware emerges, leveraging BYOVD technique to kill security tools Pierluigi Paganini January 24, 2026 Researchers identified a new Osiris ransomware used in a November…
U.S. CISA adds a flaw in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalog Pierluigi Paganini January 24, 2026 The U.S. Cybersecurity and…
Fortinet warns of active FortiCloud SSO bypass affecting updated devices Pierluigi Paganini January 23, 2026 Fortinet confirmed attacks are bypassing FortiCloud SSO authentication, affecting even…
