Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522 Pierluigi Paganini July 21, 2026 Critical SharePoint RCE vulnerability CVE-2026-50522 is under active exploitation…
Zimbra 10.1.20 patches multiple security issues, including a critical command injection bug Pierluigi Paganini July 21, 2026 Zimbra patched nine flaws in version 10.1.20, including…
Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875 Pierluigi Paganini July 21, 2026 Attackers are exploiting critical ServiceNow flaw CVE-2026-6875, allowing unauthenticated remote code execution on…
Volexity Uncovers Zero-Day Campaign Targeting SonicWall VPN Appliances Pierluigi Paganini July 20, 2026 Unknown hackers exploited two SonicWall SMA 1000 zero-days to gain root access…
CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers Pierluigi Paganini July 20, 2026 F5 fixes critical nginx flaw CVE-2026-42533 that can crash…
Critical 7-Zip Flaw Allows Code Execution by Opening Crafted XZ-Compressed Files. Update it now! Pierluigi Paganini July 20, 2026 7-Zip fixed a vulnerability that could…
Dutch Intelligence Warns Russia Uses Hacked IP Cameras for Military Espionage Pierluigi Paganini July 20, 2026 Dutch intelligence says Russia hacks IP cameras to monitor…
AI Agents Turned Into Attackers: Hugging Face Reveals Autonomous Intrusion Campaign Pierluigi Paganini July 20, 2026 Hugging Face says an autonomous AI agent breached part…
Security Affairs newsletter Round 586 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini July 19, 2026 A new round of the weekly Security Affairs newsletter…
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter CrashStealer: C++ macOS infostealer…
Attackers Can Take Over WordPress Sites Using Newly Released wp2shell Exploits Pierluigi Paganini July 19, 2026 Public exploits are now available for two critical WordPress…
OpenSSL Fixes HollowByte Memory Exhaustion Bug Pierluigi Paganini July 18, 2026 Okta disclosed HollowByte, an 11-byte OpenSSL flaw that lets remote attackers exhaust server memory…
