RondoDox Botnet spreads miners and malware
React2Shell under attack: RondoDox Botnet spreads miners and malware Pierluigi Paganini January 01, 2026 RondoDox botnet exploits the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable…
Category: Securityaffairs
ESA disclosed a data breach, hackers breached external servers
ESA disclosed a data breach, hackers breached external servers Pierluigi Paganini December 31, 2025 ESA confirmed a data breach after a hacker offered to sell…
Singapore CSA warns of maximun severity SmarterMail RCE flaw
Singapore CSA warns of maximun severity SmarterMail RCE flaw Pierluigi Paganini December 31, 2025 Singapore’s CSA warns of CVE-2025-52691, a critical SmarterMail flaw enabling unauthenticated…
the US, China, and the EU are among the top exploited GEOs
MongoBleed (CVE-2025-14847): the US, China, and the EU are among the top exploited GEOs Pierluigi Paganini December 31, 2025 MongoBleed (CVE-2025-14847) lets attackers remotely leak…
Coupang announces $1.17B compensation plan for 33.7M data breach victims
Coupang announces $1.17B compensation plan for 33.7M data breach victims Pierluigi Paganini December 30, 2025 Coupang will spend about $1.17B to compensate 33.7 million users…
Mustang Panda deploys ToneShell via signed kernel-mode rootkit driver
Mustang Panda deploys ToneShell via signed kernel-mode rootkit driver Pierluigi Paganini December 30, 2025 China-linked APT Mustang Panda used a signed kernel-mode rootkit driver to…
Lithuanian suspect arrested over KMSAuto malware that infected 2.8M systems
Lithuanian suspect arrested over KMSAuto malware that infected 2.8M systems Pierluigi Paganini December 30, 2025 A Lithuanian national was arrested for allegedly spreading KMSAuto malware…
U.S. CISA adds a flaw in MongoDB Server to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in MongoDB Server to its Known Exploited Vulnerabilities catalog Pierluigi Paganini December 30, 2025 U.S. Cybersecurity and Infrastructure Security Agency…
Romania’s Oltenia Energy Complex suffers major ransomware attack
Romania’s Oltenia Energy Complex suffers major ransomware attack Pierluigi Paganini December 29, 2025 A ransomware attack hit Romania’s Oltenia Energy Complex on December 26, knocking…
Korean Air discloses data breach after the hack of its catering and duty-free supplier
Korean Air discloses data breach after the hack of its catering and duty-free supplier Pierluigi Paganini December 29, 2025 Korean Air employee discloses a data…
MongoBleed flaw actively exploited in attacks in the wild
MongoBleed flaw actively exploited in attacks in the wild Pierluigi Paganini December 29, 2025 A recently disclosed MongoDB flaw (MongoBleed) is under active exploitation, with…
Evasive Panda cyberespionage campaign uses DNS poisoning to install MgBot backdoor
Evasive Panda cyberespionage campaign uses DNS poisoning to install MgBot backdoor Pierluigi Paganini December 29, 2025 China-linked APT Evasive Panda used DNS poisoning to deliver…