MUST READ

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 111

 | 

UK Power Plant Disabled for Four Days by Iran-Linked Hackers, Concurrent with US Water Attacks

 | 

Security Affairs newsletter Round 591 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

Zero-Click Grok Chat History Theft: Adversa AI Demonstrates Cryptographic Context Injection

 | 

Malware Hijacks Android Car Head Units

 | 

U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog

 | 

Your Shredded Visa Card May Still Work at the Checkout

 | 

Six Maximum-Severity Flaws Found in Cisco Products

 | 

GitLab Warns of Active Exploitation of Critical GraphQL Flaw

 | 

Poland's CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw

 | 

U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog

 | 

Cl0p Targets 40+ Organizations Through PTC Windchill Flaw

 | 

Manic: The Android Malware That Exfiltrates Data Even When the Phone Is Offline

 | 

U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog

 | 

US Indicts 17 Iranians Over Years-Long Cyber Espionage Campaign

 | 

StopAndProtect Turns 2,000 Hacked WordPress Sites Into a Criminal Network

 | 

Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras

 | 

Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains

 | 

50,000 Stripe Secrets Leaked in Public Code

 | 

U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog

 | 

LATEST NEWS

VIEW ALL
Security
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 111
Pierluigi Paganini August 23, 2026

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Akira Hits Safe Mode: Ransomware Rebooti ...

Cyber warfare
UK Power Plant Disabled for Four Days by Iran-Linked Hackers, Concurrent with US Water Attacks
Pierluigi Paganini August 23, 2026

Iran-linked hackers shut down a UK power plant for four days in the first confirmed attack of its kind, concurrent with water infrastructure attacks across 12 US states. Iran-linked hackers shut d ...

Breaking News
Security Affairs newsletter Round 591 by Pierluigi Paganini – INTERNATIONAL EDITION
Pierluigi Paganini August 23, 2026

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Hacking
Zero-Click Grok Chat History Theft: Adversa AI Demonstrates Cryptographic Context Injection
Pierluigi Paganini August 23, 2026

New Cryptographic Context Injection technique bypasses AI guardrails via AES-encrypted payloads, leaking full Grok chat histories zero-click Adversa AI researcher Rony Utevsky devised a new attack ...

top articles

Hackers access Booking.com user data, company secures systems
April 13, 2026
Inside ZionSiphon: politically driven malware aims at Israeli water systems
April 17, 2026
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
April 23, 2026
Checkmarx supply chain attack impacts Bitwarden npm distribution path
April 24, 2026
Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
April 26, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
Security

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 111

August 23, 2026

Cyber warfare
UK Power Plant Disabled for Four Days by Iran-Linked Hackers, Concurrent with US Water Attacks

August 23, 2026

Breaking News
Security Affairs newsletter Round 591 by Pierluigi Paganini – INTERNATIONAL EDITION

August 23, 2026

Hacking
Zero-Click Grok Chat History Theft: Adversa AI Demonstrates Cryptographic Context Injection

August 23, 2026

Hacking
Malware Hijacks Android Car Head Units

August 22, 2026

recent articles

Security
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 111

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Akira Hits Safe Mode: Ransomware Rebooti ...

Pierluigi Paganini August 23, 2026
Cyber warfare
UK Power Plant Disabled for Four Days by Iran-Linked Hackers, Concurrent with US Water Attacks

Iran-linked hackers shut down a UK power plant for four days in the first confirmed attack of its kind, concurrent with water infrastructure attacks across 12 US states. Iran-linked hackers shut d ...

Pierluigi Paganini August 23, 2026
Breaking News
Security Affairs newsletter Round 591 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini August 23, 2026
Hacking
Zero-Click Grok Chat History Theft: Adversa AI Demonstrates Cryptographic Context Injection

New Cryptographic Context Injection technique bypasses AI guardrails via AES-encrypted payloads, leaking full Grok chat histories zero-click Adversa AI researcher Rony Utevsky devised a new attack ...

Pierluigi Paganini August 23, 2026
Hacking
Malware Hijacks Android Car Head Units

Malware is abusing car infotainment updates to install proxy software, turning Android head units into nodes for the BADBOX network. Kaspersky researchers found something in June 2026 that made th ...

Pierluigi Paganini August 22, 2026
Security
U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Se ...

Pierluigi Paganini August 22, 2026
Hacking
Your Shredded Visa Card May Still Work at the Checkout

UMass Amherst researchers showed expired Visa contactless cards can make real purchases by exploiting an unsigned expiry field in Visa's EMV kernel. Researchers at the University of Massachusetts ...

Pierluigi Paganini August 21, 2026
Security
Six Maximum-Severity Flaws Found in Cisco Products

Cisco patched nine critical flaws, including six rated CVSS 10.0, found during internal testing. None are known to be exploited. Cisco released another batch of security fixes for its Crosswork pl ...

Pierluigi Paganini August 21, 2026
Hacking
GitLab Warns of Active Exploitation of Critical GraphQL Flaw

GitLab flaw CVE-2026-19478 is now under active exploitation, allowing unauthenticated attackers to modify or delete public projects. WatchTowr researchers warn of active exploitation of critical G ...

Pierluigi Paganini August 21, 2026
Security
Poland's CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw

CERT Polska confirmed active exploitation of CVE-2026-73570, a critical unauthenticated RCE in Zimbra Collaboration Suite patched on July 20. CERT Polska, Poland's national computer emergency resp ...

Pierluigi Paganini August 21, 2026
Security
U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (C ...

Pierluigi Paganini August 21, 2026
Cyber Crime
Cl0p Targets 40+ Organizations Through PTC Windchill Flaw

Cl0p claims over 40 organizations fell victim to attacks exploiting a PTC Windchill and FlexPLM vulnerability. Cl0p is using a familiar strategy again: exploit one flaw in enterprise software to a ...

Pierluigi Paganini August 21, 2026
Malware
Manic: The Android Malware That Exfiltrates Data Even When the Phone Is Offline

Manic Android malware combines banking fraud and spyware, using a Bluetooth relay to steal data even when devices are offline. ThreatFabric's Mobile Threat Intelligence team has identified a new A ...

Pierluigi Paganini August 20, 2026
Hacking
U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds an MLflow vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency ...

Pierluigi Paganini August 20, 2026
Intelligence
US Indicts 17 Iranians Over Years-Long Cyber Espionage Campaign

The US charged 17 Iranians over a years-long hacking campaign that stole 31TB from universities, companies and government agencies worldwide. Eight years after the original indictment first went p ...

Pierluigi Paganini August 20, 2026
Hacking
StopAndProtect Turns 2,000 Hacked WordPress Sites Into a Criminal Network

StopAndProtect turned nearly 2,000 hacked WordPress sites into a criminal network for malware delivery, data theft, surveillance and ransomware. Check Point Research uncovered a cybercrime operati ...

Pierluigi Paganini August 20, 2026
Internet of Things
Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras

An exposed operator directory reveals how one actor compromised 14,000+ Dahua cameras across Ukraine and Russia, no password needed for most. A researcher discovered an exposed directory containin ...

Pierluigi Paganini August 19, 2026
Malware
Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains

Microsoft tracked over 30 MacSync Stealer domains by focusing on behavioral patterns, revealing a campaign targeting passwords, keys, wallets and other data. Domain blocking is a losing game when ...

Pierluigi Paganini August 19, 2026
Cyber Crime
50,000 Stripe Secrets Leaked in Public Code

Over 50,000 exposed Stripe API keys show how leaked secrets can enable fraud, data access and account abuse within hours. Ransomnews researchers have documented a large-scale leak of Stripe mercha ...

Pierluigi Paganini August 19, 2026
Hacking
U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog. ...

Pierluigi Paganini August 19, 2026