Crooks manipulate online photos to fuel virtual kidnapping ransoms
FBI: Crooks manipulate online photos to fuel virtual kidnapping ransoms Pierluigi Paganini December 08, 2025 The FBI warns of criminals altering images shared on social…
Category: Securityaffairs
Oracle EBS zero-day used by Clop to breach Barts Health NHS
Oracle EBS zero-day used by Clop to breach Barts Health NHS Pierluigi Paganini December 08, 2025 Clop ransomware stole data from Barts Health NHS after…
China-linked threat actors weaponized React2Shell hours after disclosure
AWS: China-linked threat actors weaponized React2Shell hours after disclosure Pierluigi Paganini December 08, 2025 Multiple China-linked threat actors began exploiting the CVE-2025-55182, aka React2Shell flaw,…
U.S. CISA adds a Meta React Server Components flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a Meta React Server Components flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini December 08, 2025 U.S. Cybersecurity and Infrastructure Security Agency…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 74
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Analysis of ShadowPad Attack…
Security Affairs newsletter Round 553 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 553 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini December 07, 2025 A new round of the weekly Security Affairs newsletter…
Porsche outage in Russia serves as a reminder of the risks in connected vehicle security
Porsche outage in Russia serves as a reminder of the risks in connected vehicle security Pierluigi Paganini December 07, 2025 Hundreds of Porsche cars in…
Attackers launch dual campaign on GlobalProtect portals and SonicWall APIs
Attackers launch dual campaign on GlobalProtect portals and SonicWall APIs Pierluigi Paganini December 06, 2025 A hacking campaign is targeting GlobalProtect logins and scannig SonicWall…
Maximum-severity XXE vulnerability discovered in Apache Tika
Maximum-severity XXE vulnerability discovered in Apache Tika Pierluigi Paganini December 06, 2025 A maximum severity vulnerability in Apache Tika, tracked as CVE-2025-66516 (CVSS score of…
JPCERT/CC Reports Widespread Exploitation of Array Networks AG Gateway Vulnerability
JPCERT/CC Reports Widespread Exploitation of Array Networks AG Gateway Vulnerability Pierluigi Paganini December 05, 2025 Array Networks AG gateways have been under active exploitation since…
CISA warns of advanced China-backed intrusions
BRICKSTORM backdoor exposed: CISA warns of advanced China-backed intrusions Pierluigi Paganini December 05, 2025 CISA details BRICKSTORM, a China-linked backdoor used by China-linked APTs to…
U.S. CISA adds new OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a new an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini December 04, 2025 U.S. Cybersecurity and Infrastructure Security Agency…