Security Affairs · Scour

Apache fixes critical HTTP/2 double-free flaw CVE-2026-23918 enabling RCE

securityaffairs.com·1w

Palo Alto Networks PAN-OS flaw exploited for remote code execution

securityaffairs.com·1w

Malicious PyTorch Lightning update hits AI supply chain security

securityaffairs.com·1w

U.S. court sentences Karakurt ransomware negotiator to 8.5 years

securityaffairs.com·1w

Vimeo confirms breach via third-party vendor impacts 119K users

securityaffairs.com·1w

Critical Android vulnerability CVE-2026-0073 fixed by Google

securityaffairs.com·1w

Microsoft warns of global campaign stealing auth tokens from 35K users

securityaffairs.com·2w

Educational tech firm Instructure data breach may have impacted 9,000 schools

securityaffairs.com·2w

MOVEit automation flaws could enable full system compromise

securityaffairs.com·2w

Hackers target governments and MSPs via critical cPanel flaw CVE-2026-41940

securityaffairs.com·2w

U.S. CISA adds a flaw in Linux Kernel to its Known Exploited Vulnerabilities catalog

securityaffairs.com·2w

AI speeds flaw discovery, forcing rapid updates, UK NCSC warns

securityaffairs.com·2w

Bluekit phishing kit enables automated phishing with 40+ templates and AI tools

securityaffairs.com·2w

Salt Typhoon breach IBM subsidiary in Italy: a warning for Europe’s digital defenses

securityaffairs.com·2w

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 95

securityaffairs.com·2w

U.S. CISA adds a flaw in WebPros cPanel to its Known Exploited Vulnerabilities catalog

securityaffairs.com·2w

INTERNATIONAL EDITION

securityaffairs.com·2w

Google Revamps Bug Bounty Programs: Android Rewards Rise, Chrome Payouts Drop in the Age of AI

securityaffairs.com·2w

Two US cybersecurity experts sentenced in ransomware case, third awaits July ruling

securityaffairs.com·2w

Trellix discloses the breach of a code repository

securityaffairs.com·2w

Log in to enable infinite scrolling