MUST READ

UAC-0099 Is Now Hiding Malware Inside a Fake Notepad++ Plugin to Target Ukrainian Organizations

 | 

The AI Trust Paradox: Businesses Are Racing Ahead, but Consumers Are Hesitating

 | 

US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra Servers

 | 

U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog

 | 

Chaos ransomware deploys browser-based msaRAT to evade network detection

 | 

Google Released Gemini 3.5 Flash Cyber AI, a Specialized AI Model for Vulnerability Hunting

 | 

Check Point patches actively exploited SmartConsole authentication bypass flaw

 | 

CVE-2026-8933: Ubuntu security flaw breaks Snap sandbox protections

 | 

Adobe Acrobat Chrome extension bug enabled silent WhatsApp data theft

 | 

U.S. CISA adds DD-WRT, Langflow and WordPress flaws to its Known Exploited Vulnerabilities catalog

 | 

OpenAI AI models exploited zero-days to reach Hugging Face in benchmark test

 | 

Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522

 | 

Zimbra 10.1.20 patches multiple security issues, including a critical command injection bug

 | 

Qilin Ransomware Affiliates Abuse CVE-2026-0257 to Gain Unauthorized VPN Access

 | 

Dutch Intelligence Warns Russia Uses Hacked IP Cameras for Military Espionage

 | 

Critical 7-Zip Flaw Allows Code Execution by Opening Crafted XZ-Compressed Files. Update it now!

 | 

CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers

 | 

AI Agents Turned Into Attackers: Hugging Face Reveals Autonomous Intrusion Campaign

 | 

Volexity Uncovers Zero-Day Campaign Targeting SonicWall VPN Appliances

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 106

 | 

LATEST NEWS

VIEW ALL
Cyber warfare
UAC-0099 Is Now Hiding Malware Inside a Fake Notepad++ Plugin to Target Ukrainian Organizations
Pierluigi Paganini July 24, 2026

UAC-0099 delivers malware via a fake Notepad++ plugin after phishing, using a loader that sabotages itself if run without the correct arguments to hinder analysis. CERT-UA published a new advisory ...

Artificial Intelligence
The AI Trust Paradox: Businesses Are Racing Ahead, but Consumers Are Hesitating
Pierluigi Paganini July 24, 2026

Artificial intelligence adoption is soaring, but consumer trust lags. Transparency, human oversight, and clear AI use cases are key to closing the trust gap. Businesses are rapidly adopting AI, w ...

APT
US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra Servers
Pierluigi Paganini July 24, 2026

US agencies warn Russian group Laundry Bear is exploiting a patched Zimbra flaw to steal email accounts from organizations running unpatched servers. The Cybersecurity and Infrastructure Security ...

Security
U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog
Pierluigi Paganini July 23, 2026

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SharePoint and Check Point flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Securit ...

top articles

Hackers access Booking.com user data, company secures systems
April 13, 2026
Inside ZionSiphon: politically driven malware aims at Israeli water systems
April 17, 2026
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
April 23, 2026
Checkmarx supply chain attack impacts Bitwarden npm distribution path
April 24, 2026
Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
April 26, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
Cyber warfare

UAC-0099 Is Now Hiding Malware Inside a Fake Notepad++ Plugin to Target Ukrainian Organizations

July 24, 2026

Artificial Intelligence
The AI Trust Paradox: Businesses Are Racing Ahead, but Consumers Are Hesitating

July 24, 2026

APT
US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra Servers

July 24, 2026

Security
U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog

July 23, 2026

Malware
Chaos ransomware deploys browser-based msaRAT to evade network detection

July 23, 2026

recent articles

Cyber warfare
UAC-0099 Is Now Hiding Malware Inside a Fake Notepad++ Plugin to Target Ukrainian Organizations

UAC-0099 delivers malware via a fake Notepad++ plugin after phishing, using a loader that sabotages itself if run without the correct arguments to hinder analysis. CERT-UA published a new advisory ...

Pierluigi Paganini July 24, 2026
Artificial Intelligence
The AI Trust Paradox: Businesses Are Racing Ahead, but Consumers Are Hesitating

Artificial intelligence adoption is soaring, but consumer trust lags. Transparency, human oversight, and clear AI use cases are key to closing the trust gap. Businesses are rapidly adopting AI, w ...

Pierluigi Paganini July 24, 2026
APT
US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra Servers

US agencies warn Russian group Laundry Bear is exploiting a patched Zimbra flaw to steal email accounts from organizations running unpatched servers. The Cybersecurity and Infrastructure Security ...

Pierluigi Paganini July 24, 2026
Security
U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SharePoint and Check Point flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Securit ...

Pierluigi Paganini July 23, 2026
Malware
Chaos ransomware deploys browser-based msaRAT to evade network detection

Cisco Talos uncovered msaRAT, a Chaos ransomware RAT that hides C2 traffic by routing it through Chrome or Edge using the Chrome DevTools Protocol. Cisco Talos disclosed msaRAT, a Rust-based remot ...

Pierluigi Paganini July 23, 2026
Security
Google Released Gemini 3.5 Flash Cyber AI, a Specialized AI Model for Vulnerability Hunting

Google DeepMind unveiled Gemini 3.5 Flash Cyber, an AI model for vulnerability discovery and patching, available only to governments and trusted partners. Google DeepMind announced Gemini 3.5 Flas ...

Pierluigi Paganini July 23, 2026
Hacking
Check Point patches actively exploited SmartConsole authentication bypass flaw

Check Point addressed a critical authentication bypass flaw, tracked as CVE-2026-16232, in SmartConsole that is being actively exploited. Check Point has released security updates to fix multiple ...

Pierluigi Paganini July 23, 2026
Security
CVE-2026-8933: Ubuntu security flaw breaks Snap sandbox protections

Qualys disclosed CVE-2026-8933, a high-severity Ubuntu flaw that lets local attackers gain root privileges through a race condition in snap-confine. Qualys has disclosed a high-severity local priv ...

Pierluigi Paganini July 22, 2026
Hacking
Adobe Acrobat Chrome extension bug enabled silent WhatsApp data theft

Adobe patched CVE-2026-48294, a flaw in Adobe Acrobat Chrome extension that could let attackers steal WhatsApp Web chats by luring users to a webpage. Guardio Labs researcher Shaked Biner disclose ...

Pierluigi Paganini July 22, 2026
Security
U.S. CISA adds DD-WRT, Langflow and WordPress flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds DD-WRT, Langflow, and WordPress flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Se ...

Pierluigi Paganini July 22, 2026
Artificial Intelligence
OpenAI AI models exploited zero-days to reach Hugging Face in benchmark test

OpenAI confirmed its AI models exploited zero-days during internal testing, reaching Hugging Face servers in an unintended real-world cyberattack. OpenAI admitted on July 21 that its own AI models ...

Pierluigi Paganini July 22, 2026
Security
Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522

Critical SharePoint RCE vulnerability CVE-2026-50522 is under active exploitation after the release of a PoC exploit code. A critical Microsoft SharePoint vulnerability, tracked as CVE-2026-50522 ...

Pierluigi Paganini July 21, 2026
Security
Zimbra 10.1.20 patches multiple security issues, including a critical command injection bug

Zimbra patched nine flaws in version 10.1.20, including a critical SNMP monitoring command injection issue enabling arbitrary command execution. Zimbra released version 10.1.20 to fix nine securit ...

Pierluigi Paganini July 21, 2026
Cyber Crime
Qilin Ransomware Affiliates Abuse CVE-2026-0257 to Gain Unauthorized VPN Access

Qilin ransomware exploits the PAN-OS GlobalProtect flaw CVE-2026-0257 to gain unauthorized VPN access to unpatched networks. Arctic Wolf researchers warn that the Qilin ransomware gang is exploiti ...

Pierluigi Paganini July 21, 2026
Intelligence
Dutch Intelligence Warns Russia Uses Hacked IP Cameras for Military Espionage

Dutch intelligence says Russia hacks IP cameras to monitor NATO military logistics and weapons shipments to Ukraine. The Netherlands' AIVD and MIVD, the civilian and military intelligence services ...

Pierluigi Paganini July 20, 2026
Security
Critical 7-Zip Flaw Allows Code Execution by Opening Crafted XZ-Compressed Files. Update it now!

7-Zip fixed a vulnerability that could let attackers run code by tricking users into opening malicious XZ-compressed archive files. 7-Zip released version 26.02 to address a remote code execution ...

Pierluigi Paganini July 20, 2026
Hacking
CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers

F5 fixes critical nginx flaw CVE-2026-42533 that can crash servers and, in some cases, allow remote code execution through crafted HTTP requests. F5 released patches for a critical nginx vulnerabi ...

Pierluigi Paganini July 20, 2026
Artificial Intelligence
AI Agents Turned Into Attackers: Hugging Face Reveals Autonomous Intrusion Campaign

Hugging Face says an autonomous AI agent breached part of its production infrastructure and accessed internal data and service credentials. Hugging Face is one of the world's leading open-source A ...

Pierluigi Paganini July 20, 2026
Hacking
Volexity Uncovers Zero-Day Campaign Targeting SonicWall VPN Appliances

Unknown hackers exploited two SonicWall SMA 1000 zero-days to gain root access on VPN appliances before patches became available. Volexity published its findings after conducting an incident respo ...

Pierluigi Paganini July 20, 2026
Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 106

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter CrashStealer: C++ macOS infostealer posi ...

Pierluigi Paganini July 19, 2026