Security Affairs

Read, think, share … Security is everyone's responsibility

U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog

Covers 2 stories

Critical SharePoint Zero-Day (CVE-2025-53770) Under Active Exploitation, CISA Adds Four Known Exploited Vulnerabilities to Catalog

Read on Scour →

Feeds

Chaos ransomware deploys browser-based msaRAT to evade network detection

Security Affairs8w8 weeks ago3 min read

Security Affairs

Covers 2 stories

Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel, IOCs/2026/07/chaos-msarat.txt at main · Cisco-Talos/IOCs

Read on Scour →

Feeds

Google Released Gemini 3.5 Flash Cyber AI, a Specialized AI Model for Vulnerability Hunting

Security Affairs8w8 weeks ago3 min read

Security Affairs

Covers 3 stories

Gemini 3.6 Flash, 3.5 Flash-Lite, and 3.5 Flash Cyber, Introducing CodeMender: an AI agent for code security, and more ›

Read on Scour →

Feeds

Check Point patches actively exploited SmartConsole authentication bypass flaw

Security Affairs8w8 weeks ago2 min read

Security Affairs

Covers 1 story

Security Advisory – Action Required – July 2026 Security Update

Read on Scour →

Feeds

CVE-2026-8933: Ubuntu security flaw breaks Snap sandbox protections

Security Affairs8w8 weeks ago3 min read

Security Affairs

Covers 1 story

CVE-2026-8933: Local Privilege Escalation in Set-Capabilities snap-confine

Read on Scour →

Feeds

Adobe Acrobat Chrome extension bug enabled silent WhatsApp data theft

Security Affairs8w8 weeks ago3 min read

Security Affairs

Covers 1 story

"HermeticReader" , The Vulnerability That Turned Adobe's 300M-Install Extension Into a Full WhatsApp Takeover

Read on Scour →

Feeds

U.S. CISA adds DD-WRT, Langflow and WordPress flaws to its Known Exploited Vulnerabilities catalog

Security Affairs8w8 weeks ago3 min read

Security Affairs

Covers 5 stories

Critical SharePoint Zero-Day (CVE-2025-53770) Under Active Exploitation, WordPress 7.0.2 Release, and more ›

Read on Scour →

Feeds

OpenAI AI models exploited zero-days to reach Hugging Face in benchmark test

Security Affairs8w8 weeks ago3 min read

Security Affairs

Read on Scour →

Feeds

Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522

Security Affairs8w8 weeks ago3 min read

Security Affairs

Covers 1 story

Critical SharePoint Zero-Day (CVE-2025-53770) Under Active Exploitation

Read on Scour →

Feeds

Zimbra 10.1.20 patches multiple security issues, including a critical command injection bug

Security Affairs8w8 weeks ago1 min read

Security Affairs

Read on Scour →

Feeds

Qilin Ransomware Affiliates Abuse CVE-2026-0257 to Gain Unauthorized VPN Access

Security Affairs8w8 weeks ago4 min read

Security Affairs

Covers 3 stories

Critical SharePoint Zero-Day (CVE-2025-53770) Under Active Exploitation, CVE-2026-0257 PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities, and more ›

Read on Scour →

Feeds

Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875

Security Affairs9w9 weeks ago3 min read

Security Affairs

Covers 1 story

Smashing the ServiceNow Sandbox – Pre Authentication RCE

Read on Scour →

Feeds

Dutch Intelligence Warns Russia Uses Hacked IP Cameras for Military Espionage

Security Affairs9w9 weeks ago4 min read

Security Affairs

Covers 1 story

Inside Russia’s Camera-Hacking Espionage Campaign

Read on Scour →

Feeds

Critical 7-Zip Flaw Allows Code Execution by Opening Crafted XZ-Compressed Files. Update it now!

Security Affairs9w9 weeks agoCovered by21 min read

Covered by2 sites

CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers

Security Affairs9w9 weeks ago1 min read

Security Affairs

Covers 1 story

15-Year-Old Pre-Auth nginx RCE Across 13 Call Sites: Two-Pass Capture Clobbering CVE-2026-42533

Read on Scour →

Feeds

AI Agents Turned Into Attackers: Hugging Face Reveals Autonomous Intrusion Campaign

Security Affairs9w9 weeks ago3 min read

Security Affairs

Covers 2 stories

Security incident disclosure — July 2026, GLM-5.2 (6 minute read)

Read on Scour →

Feeds

Volexity Uncovers Zero-Day Campaign Targeting SonicWall VPN Appliances

Security Affairs9w9 weeks ago6 min read

Security Affairs

Covers 3 stories

Security Advisory, Proxying to Compromise: SonicWall Secure Mobile Access 0-day Exploitation, and more ›

Read on Scour →

Feeds

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 106

Security Affairs9w9 weeks ago

Security Affairs

Read on Scour →

Feeds

INTERNATIONAL EDITION

Security Affairs9w9 weeks ago3 min read

Security Affairs

Covers 24 stories

UK and EU strike Russian cyber networks with new sanctions, CrashStealer: C++ macOS infostealer posing as crash reporter, and more ›

Read on Scour →

Feeds

Attackers Can Take Over WordPress Sites Using Newly Released wp2shell Exploits

Security Affairs9w9 weeks ago2 min read

Security Affairs

Covers 3 stories

WordPress 7.0.2 Release, REST API batch-route confusion and SQL injection issue leading to Remote Code Execution, and more ›

Read on Scour →

Feeds

« Page 14
·
Page 16 »

Keyboard shortcuts

Navigation

Next / previous post: j/k
Open post: oorEnter
Preview post: v

Post actions

Love post: a
Like post: l
Dislike: d
Undo reaction: u
Save / unsave: s

Recommendations

Add interest / feed: Enter
Not interested: x

Go to

Home: gh
Interests: gi
Feeds: gf
Likes: gl
History: gy
Changelog: gc
Settings: gs
Discover: gb
Search: /

Pagination

Next page: n
Previous page: p

General

Show this help: ?
Submit feedback: !
Close modal / unfocus: Esc

Press ? anytime to show this help